Pre-install decision 79 · Manual review
81 · Manual review
88 · Evidence missing Best
Clear source, High execution risk, Universal
Clear source, High execution risk, Universal
Clear source, High execution risk, Claude
unexpected code execution, data exfiltration, human approval gap
unexpected code execution, identity privilege abuse, data exfiltration
unexpected code execution, identity privilege abuse, data exfiltration
missing license, broad permissions, shell without guardrails
missing license, broad permissions, shell without guardrails
missing license, broad permissions, shell without guardrails
Permission review, Network, Command
Permission review, Network, Secrets, Command
Permission review, Network, Secrets, Command
65%
67%
Source & provenance IBM/eval-assist
Kymo-MCP/mcpcan
openclaw/skills
Automation & Workflows
Operations & Infra
Dev & Engineering
Risk & permission signals metadata-only
needs credentials, network access
needs credentials, network access, runs shell, writes files
repository clone
repository clone, local runtime dependencies
verify source provenance before install
Install & compatibility Universal
Universal
Claude, Cursor, Windsurf
script-backed
script-backed
script-backed
Community 97
0