Pre-install decision 82 · Manual review
82 · Manual review
88 · Evidence missing Best
Clear source, High execution risk, Universal
Clear source, High execution risk, Claude
Clear source, High execution risk, Claude
High
High
unexpected code execution, data exfiltration, human approval gap
data exfiltration, human approval gap
unexpected code execution, identity privilege abuse, data exfiltration
missing license, broad permissions, shell without guardrails
missing license, broad permissions, network without allowlist
missing license, broad permissions, shell without guardrails
Permission review, Network, Command
Permission review, Network, Command
Permission review, Network, Secrets, Command
65%
67%
Source & provenance docker/compose-for-agents
openai/skills/tree/main/skills/.curated/security-ownership-map
openclaw/skills
Dev & Engineering
Data & Analytics
Dev & Engineering
Risk & permission signals No explicit signals
writes files
needs credentials, network access, runs shell, writes files
repository clone, local runtime dependencies
registry access, remote metadata pull, runtime dependencies may be required
verify source provenance before install
Install & compatibility Universal
Claude, Codex, Cursor, Universal
Claude, Cursor, Windsurf
script-backed
registry-install
script-backed
Community 905
0