Compare skills
Pick 2–4 skills and compare what really matters: fit, risk, install effort, and community signal.
Comparison matrix
Highlights show current best; tooltip explains diff/best rules.
SAS-v2.1 diff rules / risk tag notes
Start with the matrix. Open this section when you need to understand audit grades, top threats, control gaps, and best-value highlights.
Suggested baseline
Search to add skills, or paste 2–4 comma-separated slugs.
How differences are detected
A row is marked different when selected skills have distinct values. Only-differences mode hides rows that are identical.
How best values are highlighted
Audit score, evidence confidence, trust score, and community signal prefer higher values; execution risk and install friction prefer lower values.
How to read risk tags
Risk tags come from SAS-v2.1 public-evidence signals and point to command, network, secret, context, or supply-chain items to review before install.
Selected audit signals
ui-ux-pro-max
Execution risk：High
Threat tags：data exfiltration, human approval gap
Control gaps：missing license, network without allowlist, no human approval
ByteRover
Execution risk：High
Threat tags：unexpected code execution, identity privilege abuse, data exfiltration
Control gaps：missing repo, missing license, broad permissions
prompt-in-context-learning
Execution risk：High
Threat tags：prompt injection, tool poisoning, unexpected code execution
Control gaps：missing license, broad permissions, shell without guardrails
| Dimension | ui-ux-pro-max | ByteRover | prompt-in-context-learning |
|---|---|---|---|
| SAS-v2.1 pre-install audit | |||
Audit grade | C · Review first | D · Limited evidence | C · Review first |
Threat tags | data exfiltration, human approval gap | unexpected code execution, identity privilege abuse, data exfiltration | prompt injection, tool poisoning, unexpected code execution |
Control gaps | missing license, network without allowlist, no human approval | missing repo, missing license, broad permissions | missing license, broad permissions, shell without guardrails |
Permission summary | Network, Command | Permission review, Network, Secrets, Command | Permission review, Network, Command |
Evidence confidence | 63% | 69% | 68% |
| Source & provenance | |||
Provenance | nextlevelbuilder/ui-ux-pro-max-skill/tree/main/.claude/skills/ui-ux-pro-max | Source needs review | EgoAlpha/prompt-in-context-learning |
Category | Design & Content | Knowledge & RAG | Knowledge & RAG |
Freshness | |||
| Risk & trust | |||
Trust score | 82 | 79 | 79 |
Audit signals | No explicit signals | needs credentials, network access, runs shell, writes files | No explicit signals |
| Install & compatibility | |||
Supported tools | Claude, Codex, Cursor, Universal | Codex, OpenClaw, Claude, Cursor, Universal | Universal |
Install method | registry-install | instruction-only | script-backed |
Install friction | |||
| Community | |||
Stars | 29.8K | 108 | 2.1K |
Repository: goclaw
Author: nextlevelbuilder · Source status: Clear source
GoClaw - GoClaw is OpenClaw rebuilt in Go — with multi-tenant isolation, 5-layer security, and native concurrency.
Score basis：Clear source · Risk needs review · Universal
Repository: openclaw/skills
Author: twinsgeeks · Source status: Clear source
Commitment for AI agents — find agents ready for commitment, commitment compatibility, and commitment-level connections.
Score basis：Clear source · High risk signals · Claude
Repository: openclaw/skills
Author: hoyaryyj · Source status: Clear source
Create and edit Obsidian Bases (.base files) with views, filters, formulas, and summaries.
Score basis：Clear source · High risk signals · Universal
Repository: openclaw/skills
Author: crecendow · Source status: Clear source
禅道自动记工时技能。用户描述今天做了什么事，自动搜索匹配任务，确认后调用禅道API记录工时。支持智能匹配、自动重新登录、正确计算剩余工时。使用 recordworkhour 接口，适配禅道 21.x 开源版。
Score basis：Clear source · High risk signals · Universal
Repository: openclaw/skills
Author: zmofei · Source status: Clear source
Expert guidance on validating, optimizing, and ensuring quality of Mapbox styles through validation, accessibility checks, and optimization.
Score basis：Clear source · High risk signals · Universal
2026-02-04 |
2026-04-08 |
2026-04-02 |
Permission hints |
|---|
registry access, remote metadata pull, runtime dependencies may be required |
review skill metadata before install, check required credentials in skill docs |
repository clone, local runtime dependencies |
50 |
100 |
40 |
