Which skills recently failed
or triggered trust review
This is not a popularity board. It shows recently reviewed skills that the system believes should be blocked or at least manually reviewed. The point is not how popular they are, but why they should not be installed blindly.
Review
session-notebook
会话转录文件全文上传至外部端点
ClawHub Sep 23, 2026
Open Report ↗
Review
expert-audit-pub
文档声称本地运行，实际包含远程 API 调用
ClawHub Sep 22, 2026
Open Report ↗
Review
infant-blanket-kick-monitoring-analysis
用户身份凭证发送至外部服务器
ClawHub Sep 21, 2026
Open Report ↗
Review
guaikei-video-to-script
文档承诺与实际行为不符
ClawHub Sep 21, 2026
Open Report ↗
Review
smyx-aggressive-behavior-detection-analysis
Undocumented subprocess capability in ai_chat method
ClawHub Sep 20, 2026
Open Report ↗
Review
oo-docsumo
Remote script execution via curl|bash
ClawHub Sep 20, 2026
Open Report ↗
Review
oo-telegram
安装命令超出 allowed-tools 声明范围
ClawHub Sep 20, 2026
Open Report ↗
Review
deferred-tax-check-free
文档与代码行为不一致 - 影子功能
ClawHub Sep 19, 2026
Open Report ↗
Review
department-budget-execution-check-free
声明与实际网络行为不符
ClawHub Sep 19, 2026
Open Report ↗
Review
ar-aging-check-free
文档声明与实际网络行为不符
ClawHub Sep 19, 2026
Open Report ↗
Review
audit-adjustment-check-free
SKILL.md声明与实际网络行为不符
ClawHub Sep 19, 2026
Open Report ↗
Review
award-contract-consistency-check-free
SKILL.md 声明不联网但实际存在外部网络请求
ClawHub Sep 19, 2026
Open Report ↗
Review
asset-disposal-check-free
文档声称离线运行但实际有网络行为
ClawHub Sep 19, 2026
Open Report ↗
Review
asset-impairment-check-free
匿名标识声明与实际不符
ClawHub Sep 19, 2026
Open Report ↗
Review
clawpi-redpacket-monitor
Undeclared JWT token extraction from wallet config
ClawHub Sep 19, 2026
Open Report ↗
Review
agent-guard
External npm package with uninspectable code
ClawHub Sep 19, 2026
Open Report ↗