Threat Research

Skill Risk Index

Real security scans of the most popular AI agent skills.

Scan a skill

Skill	Stars	Findings	Risk
cann-review github/leoyeai Critical 2.1k21 findings This skill sends sensitive values to an external host and executes remote code during use. Automated analysis flagged 6 additional risk patterns.	2.1k	21	Critical
figma-to-static github/leoyeai Critical 2.1k6 findings This skill reads local credential files and sends sensitive values to an external host. Automated analysis flagged 2 additional risk patterns.	2.1k	6	Critical
openclaw-workflow github/leoyeai Critical 2.1k8 findings Automated analysis flagged 8 potential risk patterns.	2.1k	8	Critical
proactive-amcp github/leoyeai Critical 2.1k32 findings This skill sends sensitive values to an external host and reads local credential files. Automated analysis flagged 9 additional risk patterns.	2.1k	32	Critical
wtt-skill github/leoyeai Critical 2.1k13 findings This skill sends sensitive values to an external host and reads local credential files. Automated analysis flagged 7 additional risk patterns.	2.1k	13	Critical
textme github/sickn33 High 43.8k3 findings This skill executes remote code during use and sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	43.8k	3	High
boss-cli github/jackwener High 8423 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	842	3	High
clawsend github/leoyeai High 2.1k4 findings Automated analysis flagged 4 potential risk patterns.	2.1k	4	High
wemp-ops github/leoyeai High 2.1k3 findings This skill sends sensitive values to an external host. Automated analysis flagged 2 additional risk patterns.	2.1k	3	High
gh-issues github/openclaw Medium 385.8k2 findings Automated analysis flagged 2 potential risk patterns.	385.8k	2	Medium
skill-creator github/openclaw Medium 385.8k4 findings Automated analysis flagged 4 potential risk patterns.	385.8k	4	Medium
sandbox-bench github/vercel Medium 141.7k3 findings Automated analysis flagged 3 potential risk patterns.	141.7k	3	Medium
design github/nextlevelbuilder Medium 115.3k2 findings Automated analysis flagged 2 potential risk patterns.	115.3k	2	Medium
mode-creator github/thedotmack Medium 90.3k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	90.3k	2	Medium
paperclip github/paperclipai Medium 76.4k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	76.4k	2	Medium
bmad-deep-recon github/bmad-code-org Medium 51.7k2 findings Automated analysis flagged 2 potential risk patterns.	51.7k	2	Medium
macrocli github/hkuds Medium 46.9k5 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	46.9k	5	Medium
qa-team github/posthog Medium 37.6k2 findings Automated analysis flagged 2 potential risk patterns.	37.6k	2	Medium
markitdown github/k-dense-ai Medium 33.1k3 findings Automated analysis flagged 3 potential risk patterns.	33.1k	3	Medium
scientific-slides github/k-dense-ai Medium 33.1k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	33.1k	2	Medium
heroui-native github/heroui-inc Medium 30.3k4 findings This skill executes remote code during use. Automated analysis flagged 2 additional risk patterns.	30.3k	4	Medium
deploy-to-vercel github/vercel-labs Medium 29.9k2 findings This skill sends sensitive values to an external host.	29.9k	2	Medium
antigravity github/jackwener Medium 28k3 findings This skill contains obfuscated or hidden content. Automated analysis flagged 2 additional risk patterns.	28k	3	Medium
baoyu-post-to-x github/jimliu Medium 24.8k3 findings Automated analysis flagged 3 potential risk patterns.	24.8k	3	Medium
ce-optimize github/everyinc Medium 24.2k2 findings Automated analysis flagged 2 potential risk patterns.	24.2k	2	Medium
ce-pov github/everyinc Medium 24.2k2 findings Automated analysis flagged 2 potential risk patterns.	24.2k	2	Medium
archon github/coleam00 Medium 23.1k2 findings This skill executes remote code during use. Automated analysis flagged 1 additional risk pattern.	23.1k	2	Medium
colleague-skill github/titanwings Medium 20.8k2 findings This skill sends sensitive values to an external host.	20.8k	2	Medium
video-use github/browser-use Medium 20.5k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	20.5k	2	Medium
Aphorisms github/danielmiessler Medium 17.9k4 findings Automated analysis flagged 4 potential risk patterns.	17.9k	4	Medium
Art github/danielmiessler Medium 17.9k3 findings Automated analysis flagged 3 potential risk patterns.	17.9k	3	Medium
BrightData github/danielmiessler Medium 17.9k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	17.9k	2	Medium
vast-gpu github/wanshuiyin Medium 14.5k2 findings Automated analysis flagged 2 potential risk patterns.	14.5k	2	Medium
openapi-to-mcp github/mcp-use Medium 10.5k3 findings Automated analysis flagged 3 potential risk patterns.	10.5k	3	Medium
Kami github/tw93 Medium 10.5k2 findings Automated analysis flagged 2 potential risk patterns.	10.5k	2	Medium
browser-automation github/civitai Medium 7.2k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	7.2k	2	Medium
cloudflare github/civitai Medium 7.2k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	7.2k	2	Medium
building-register-search github/nomadamas Medium 7.1k2 findings This skill contains prompt-injection style instructions. Automated analysis flagged 1 additional risk pattern.	7.1k	2	Medium
webnovel-write github/lingfengqaq Medium 6.4k3 findings Automated analysis flagged 3 potential risk patterns.	6.4k	3	Medium
bb-browser github/epiral Medium 6k4 findings This skill sends sensitive values to an external host. Automated analysis flagged 3 additional risk patterns.	6k	4	Medium
n8n-self-hosting github/czlonkowski Medium 6k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	6k	2	Medium
films-search github/netease-youdao Medium 5.9k4 findings This skill sends sensitive values to an external host. Automated analysis flagged 2 additional risk patterns.	5.9k	4	Medium
music-search github/netease-youdao Medium 5.9k4 findings This skill sends sensitive values to an external host. Automated analysis flagged 3 additional risk patterns.	5.9k	4	Medium
story github/worldwonderer Medium 5.4k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	5.4k	2	Medium
amazon-alexa-qa github/browser-act Medium 5.3k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	5.3k	2	Medium
google-maps-contact-extract github/browser-act Medium 5.3k4 findings Automated analysis flagged 4 potential risk patterns.	5.3k	4	Medium
indeed-job-search github/browser-act Medium 5.3k2 findings This skill sends sensitive values to an external host.	5.3k	2	Medium
linkedin-jobs-search github/browser-act Medium 5.3k3 findings This skill sends sensitive values to an external host. Automated analysis flagged 2 additional risk patterns.	5.3k	3	Medium
webcrawler-deep-crawl github/browser-act Medium 5.3k3 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	5.3k	3	Medium
facebook-groups-scrape-posts github/browser-act Medium 5.3k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	5.3k	2	Medium
x-dm-auto-chat github/browser-act Medium 5.3k6 findings This skill sends sensitive values to an external host. Automated analysis flagged 3 additional risk patterns.	5.3k	6	Medium
macos-spm-app-packaging github/dimillian Medium 3.9k2 findings Automated analysis flagged 2 potential risk patterns.	3.9k	2	Medium
ops-monitor github/davepoon Medium 3.3k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	3.3k	2	Medium
ops-package github/davepoon Medium 3.3k7 findings This skill sends sensitive values to an external host.	3.3k	7	Medium
ops-yolo github/davepoon Medium 3.3k3 findings This skill sends sensitive values to an external host. Automated analysis flagged 2 additional risk patterns.	3.3k	3	Medium
google-workspace github/mitsuhiko Medium 2.8k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	2.8k	2	Medium
browser github/stellarlinkco Medium 2.7k4 findings Automated analysis flagged 4 potential risk patterns.	2.7k	4	Medium
comet-classic-039-verify github/rpamis Medium 2.7k2 findings Automated analysis flagged 2 potential risk patterns.	2.7k	2	Medium
pair-trade-screener github/tradermonty Medium 2.6k2 findings This skill sends sensitive values to an external host.	2.6k	2	Medium
agents-pay github/aws Medium 2.3k5 findings This skill sends sensitive values to an external host. Automated analysis flagged 3 additional risk patterns.	2.3k	5	Medium
aws-transform github/aws Medium 2.3k2 findings Automated analysis flagged 2 potential risk patterns.	2.3k	2	Medium
ai-drama-prompt-factory github/leoyeai Medium 2.1k2 findings Automated analysis flagged 2 potential risk patterns.	2.1k	2	Medium
ai-flight github/leoyeai Medium 2.1k4 findings This skill sends sensitive values to an external host. Automated analysis flagged 2 additional risk patterns.	2.1k	4	Medium
ai-md github/leoyeai Medium 2.1k2 findings Automated analysis flagged 2 potential risk patterns.	2.1k	2	Medium
airfly github/leoyeai Medium 2.1k3 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	2.1k	3	Medium
airticket github/leoyeai Medium 2.1k3 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	2.1k	3	Medium
awp github/leoyeai Medium 2.1k5 findings This skill sends sensitive values to an external host.	2.1k	5	Medium
bankr-2 github/leoyeai Medium 2.1k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	2.1k	2	Medium
chanjing-one-click-video-creation github/leoyeai Medium 2.1k2 findings This skill sends sensitive values to an external host.	2.1k	2	Medium
cl-lp-rebalancer github/leoyeai Medium 2.1k2 findings This skill sends sensitive values to an external host.	2.1k	2	Medium
claw-future github/leoyeai Medium 2.1k2 findings Automated analysis flagged 2 potential risk patterns.	2.1k	2	Medium
claw-social github/leoyeai Medium 2.1k4 findings This skill sends sensitive values to an external host.	2.1k	4	Medium
clawbuddy-buddy github/leoyeai Medium 2.1k3 findings This skill sends sensitive values to an external host. Automated analysis flagged 2 additional risk patterns.	2.1k	3	Medium
codex-cli-task github/leoyeai Medium 2.1k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	2.1k	2	Medium
codex-code-task github/leoyeai Medium 2.1k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	2.1k	2	Medium
conduxt github/leoyeai Medium 2.1k4 findings Automated analysis flagged 4 potential risk patterns.	2.1k	4	Medium
context-restore github/leoyeai Medium 2.1k2 findings This skill sends sensitive values to an external host.	2.1k	2	Medium
crab github/leoyeai Medium 2.1k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	2.1k	2	Medium
crypto-executor github/leoyeai Medium 2.1k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	2.1k	2	Medium
cs-playwright-pro github/leoyeai Medium 2.1k2 findings Automated analysis flagged 2 potential risk patterns.	2.1k	2	Medium
ctrip-flight github/leoyeai Medium 2.1k4 findings This skill sends sensitive values to an external host. Automated analysis flagged 2 additional risk patterns.	2.1k	4	Medium
defipoly github/leoyeai Medium 2.1k4 findings Automated analysis flagged 4 potential risk patterns.	2.1k	4	Medium
dinstein-tech-news-digest github/leoyeai Medium 2.1k5 findings This skill sends sensitive values to an external host. Automated analysis flagged 2 additional risk patterns.	2.1k	5	Medium
edgeone-website-skeleton github/leoyeai Medium 2.1k3 findings Automated analysis flagged 3 potential risk patterns.	2.1k	3	Medium
emblemai-agentwallet github/leoyeai Medium 2.1k3 findings Automated analysis flagged 3 potential risk patterns.	2.1k	3	Medium
fbt-flight github/leoyeai Medium 2.1k4 findings This skill sends sensitive values to an external host. Automated analysis flagged 2 additional risk patterns.	2.1k	4	Medium
fbt-hotel github/leoyeai Medium 2.1k3 findings Automated analysis flagged 3 potential risk patterns.	2.1k	3	Medium
flightai github/leoyeai Medium 2.1k3 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	2.1k	3	Medium
funai-skill github/leoyeai Medium 2.1k3 findings This skill sends sensitive values to an external host. Automated analysis flagged 2 additional risk patterns.	2.1k	3	Medium
google-bigquery github/leoyeai Medium 2.1k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	2.1k	2	Medium
google-classroom github/leoyeai Medium 2.1k2 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	2.1k	2	Medium
health-score-pro github/leoyeai Medium 2.1k2 findings This skill sends sensitive values to an external host.	2.1k	2	Medium
hsa-test3 github/leoyeai Medium 2.1k3 findings This skill sends sensitive values to an external host. Automated analysis flagged 2 additional risk patterns.	2.1k	3	Medium
hsa-test4 github/leoyeai Medium 2.1k4 findings Automated analysis flagged 4 potential risk patterns.	2.1k	4	Medium
i-am github/leoyeai Medium 2.1k3 findings Automated analysis flagged 3 potential risk patterns.	2.1k	3	Medium
ifind-data github/leoyeai Medium 2.1k4 findings This skill sends sensitive values to an external host. Automated analysis flagged 3 additional risk patterns.	2.1k	4	Medium
imap-smtp-email github/leoyeai Medium 2.1k3 findings Automated analysis flagged 3 potential risk patterns.	2.1k	3	Medium
katbot-trading github/leoyeai Medium 2.1k3 findings This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern.	2.1k	3	Medium
last30days github/leoyeai Medium 2.1k2 findings Automated analysis flagged 2 potential risk patterns.	2.1k	2	Medium
medeo-video github/leoyeai Medium 2.1k3 findings This skill sends sensitive values to an external host.	2.1k	3	Medium

Showing 100 of 20427 skills - scroll for more.

Assessed by the Anomity Skill Intelligence engine. Findings indicate risk patterns, not confirmed exploitation. Maintainers can request a review or rescan. Machine-readable feed: feed.json - free with attribution, see the data terms. Plain-HTML listing of every skill: full skill directory.

Show you check your skills

Scanning your agent skills with Anomity? Add the badge to your README.

Markdown

[![Anomity Skill Check](https://anomity.ai/skills/badge.svg)](https://anomity.ai/skills/)

HTML

<a href="https://anomity.ai/skills/"><img src="https://anomity.ai/skills/badge.svg" alt="Anomity Skill Check"></a>

Image URL

https://anomity.ai/skills/badge.svg

Skills are only half the picture

Scan-time vetting catches risky skills before install. Anomity governs what agents actually do at runtime: full visibility and enforcement across every AI agent and MCP. Book a 30-minute demo.