| Pre-install decision |
|---|
| | 48 · Evidence missing | 65 · Manual review |
|---|
| Clear source, High execution risk, Universal | Source needs review, High execution risk, Claude | Clear source, High execution risk, Universal |
|---|
| unexpected code execution, data exfiltration, human approval gap | unexpected code execution, identity privilege abuse, data exfiltration | unexpected code execution, data exfiltration, memory context poisoning |
|---|
| missing license, broad permissions, shell without guardrails | missing repo, missing license, broad permissions | missing license, broad permissions, shell without guardrails |
|---|
| Permission review, Network, Command | Permission review, Network, Secrets, Command | Permission review, Network, Command |
|---|
| 65% | | 67% |
|---|
| Source & provenance |
|---|
| openai/codex | Source needs review | microsoft/graphrag |
|---|
| Agent & Tools | Knowledge & RAG | Automation & Workflows |
|---|
|
|---|
| Risk & permission signals |
|---|
| metadata-only | needs credentials, network access, runs shell, writes files | metadata-only |
|---|
| repository clone | review skill metadata before install, check required credentials in skill docs | repository clone |
|---|
| Install & compatibility |
|---|
| Universal | Codex, OpenClaw, Claude, Cursor, Universal | Universal |
|---|
| script-backed | instruction-only | script-backed |
|---|
|
|---|
| Community |
|---|
| | 108 | 32.2K |
|---|