| Pre-install decision |
|---|
| | 65 · Manual review | 60 · Manual review |
|---|
| Clear source, High execution risk, OpenClaw | Clear source, High execution risk, Universal | Clear source, High execution risk, OpenClaw |
|---|
| unexpected code execution, data exfiltration, human approval gap | unexpected code execution, data exfiltration, memory context poisoning | unexpected code execution, identity privilege abuse, data exfiltration |
|---|
| missing license, shell without guardrails, network without allowlist | missing license, broad permissions, shell without guardrails | missing license, broad permissions, shell without guardrails |
|---|
| Permission review, Network, Command | Permission review, Network, Command | Permission review, Network, Secrets, Command |
|---|
| 63% | | |
|---|
| Source & provenance |
|---|
| openclaw/skills | microsoft/graphrag | openclaw/skills |
|---|
| Operations & Infra | Automation & Workflows | Dev & Engineering |
|---|
|
|---|
| Risk & permission signals |
|---|
| runs shell | metadata-only | needs credentials, network access, runs shell, writes files |
|---|
| verify source provenance before install | repository clone | requires binary: node, requires binary: npx, requires binary: gp-cli, verify source provenance before install |
|---|
| Install & compatibility |
|---|
| OpenClaw | Universal | OpenClaw |
|---|
| | 75 | 65 |
|---|
| Community |
|---|
| 0 | | 0 |
|---|