| Pre-install decision |
|---|
| | 82 · Manual review | 79 · Evidence missing |
|---|
| Clear source, High execution risk, Universal | Clear source, High execution risk, Claude | Clear source, High execution risk, Universal |
|---|
| unexpected code execution, data exfiltration, human approval gap | data exfiltration, human approval gap | unexpected code execution, identity privilege abuse, data exfiltration |
|---|
| missing license, broad permissions, shell without guardrails | missing license, broad permissions, network without allowlist | missing license, broad permissions, shell without guardrails |
|---|
| Permission review, Network, Command | Permission review, Network, Command | Permission review, Network, Secrets, Command |
|---|
| 65% | 67% | |
|---|
| Source & provenance |
|---|
| langfuse/langfuse-python | openai/skills/tree/main/skills/.curated/security-ownership-map | lsdefine/GenericAgent |
|---|
| Automation & Workflows | Data & Analytics | Operations & Infra |
|---|
|
|---|
| Risk & permission signals |
|---|
| metadata-only | writes files | needs credentials |
|---|
| repository clone | registry access, remote metadata pull, runtime dependencies may be required | repository clone, local runtime dependencies |
|---|
| Install & compatibility |
|---|
| Universal | Claude, Codex, Cursor, Universal | Universal |
|---|
| script-backed | registry-install | script-backed |
|---|
|
|---|
| Community |
|---|
| 378 | | 882 |
|---|