Which skills recently failed
or triggered trust review
This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.
Review
问专家技能
Bypass robot detection declared as legitimate use case
Manual upload Apr 4, 2026
Open Report ↗
Review
minimax-image-gen
SSL/TLS security claim contradicts code implementation
Manual upload Apr 4, 2026
Open Report ↗
Review
gougoubi-claim-all-rewards
Missing implementation scripts
Manual upload Apr 4, 2026
Open Report ↗
Review
lowcode-platform-development
Declared PowerShell script missing
Manual upload Apr 4, 2026
Open Report ↗
Review
k8s-incident-response-playbook
Sensitive incident data transmitted to external API
Manual upload Apr 4, 2026
Open Report ↗
Review
remnawave-robot
Hardcoded IP address as default API endpoint
Manual upload Apr 4, 2026
Open Report ↗
Review
cat-viking-memory
Undeclared network communication to private IP
Manual upload Apr 4, 2026
Open Report ↗
Review
openclaw-security-auditor
Undeclared filesystem write capability
Manual upload Apr 4, 2026
Open Report ↗
Review
crewai-team
Hardcoded API credential in 15 Python files
Manual upload Apr 4, 2026
Open Report ↗
Review
instreet-gomoku
Hardcoded API credential in source code
Manual upload Apr 4, 2026
Open Report ↗
Review
exploration-mode-skill
Undeclared autonomous execution
Manual upload Apr 4, 2026
Open Report ↗
Review
jef1test
All API data routed through third-party proxy
Manual upload Apr 4, 2026
Open Report ↗
Review
gougoubi-activate-and-stake-risklp
Referenced scripts not included in package
Manual upload Apr 4, 2026
Open Report ↗
Review
PV_12
Vague capability claims without verification
Manual upload Apr 4, 2026
Open Report ↗
Review
interactive-infographic
Hardcoded fallback API key in source code
Manual upload Apr 4, 2026
Open Report ↗
Review
okx-security
Remote installer download and execution
Manual upload Apr 4, 2026
Open Report ↗