| Pre-install decision |
|---|
| 80 · Manual review | | 81 · Evidence missing |
|---|
| Clear source, High execution risk, Claude | Clear source, High execution risk, Universal | Clear source, High execution risk, Universal |
|---|
| | High | High |
|---|
| data exfiltration, memory context poisoning, human approval gap | unexpected code execution, data exfiltration, memory context poisoning | prompt injection, tool poisoning, unexpected code execution |
|---|
| missing license, broad permissions, network without allowlist | missing license, broad permissions, shell without guardrails | missing license, broad permissions, shell without guardrails |
|---|
| Network, Command | Permission review, Network, Command | Permission review, Network, Secrets, Command |
|---|
| 67% | 67% | |
|---|
| Source & provenance |
|---|
| anthropics/knowledge-work-plugins/tree/main/sales/skills/create-an-asset | JM-Lab/spring-ai-playground | neverinfamous/memory-journal-mcp |
|---|
| Knowledge & RAG | Knowledge & RAG | Knowledge & RAG |
|---|
|
|---|
| Risk & permission signals |
|---|
| No explicit signals | network access | needs credentials, network access |
|---|
| registry access, remote metadata pull, runtime dependencies may be required | repository clone, local runtime dependencies | repository clone, local runtime dependencies |
|---|
| Install & compatibility |
|---|
| Claude, Codex, Cursor, Universal | Universal | Universal |
|---|
| registry-install | script-backed | script-backed |
|---|
|
|---|
| Community |
|---|
| | 180 | 13 |
|---|