Pre-install decision 82 · Manual review
85 · Evidence missing Best
82 · Manual review
Clear source, High execution risk, Universal
Clear source, High execution risk, Claude
Clear source, High execution risk, Claude
High
High
unexpected code execution, data exfiltration, memory context poisoning
unexpected code execution, identity privilege abuse, data exfiltration
data exfiltration, human approval gap
missing license, broad permissions, shell without guardrails
missing license, broad permissions, shell without guardrails
missing license, broad permissions, network without allowlist
Permission review, Network, Command
Permission review, Network, Secrets, Command
Network, Command
67%
65%
Source & provenance AnnieBabs/Create-MCP
openclaw/skills
github/awesome-copilot
Integrations & Connectors
Knowledge & RAG
Integrations & Connectors
Risk & permission signals No explicit signals
network access, runs shell, writes files
No explicit signals
repository clone, local runtime dependencies
verify source provenance before install
local skill installation, workspace file updates
Install & compatibility Universal
Claude, Codex
Claude, Codex, Cursor, Windsurf
script-backed
script-backed
instruction-only
Community 5
0