| Pre-install decision |
|---|
| 62 · Manual review | 61 · Manual review | |
|---|
| Clear source, High execution risk, Universal | Clear source, High execution risk, Universal | Clear source, High execution risk, Claude |
|---|
| High | High | |
|---|
| prompt injection, tool poisoning, unexpected code execution | unexpected code execution, identity privilege abuse, data exfiltration | data exfiltration, human approval gap |
|---|
| missing license, broad permissions, shell without guardrails | missing license, broad permissions, shell without guardrails | missing license, broad permissions, network without allowlist |
|---|
| Permission review, Network, Command | Permission review, Network, Secrets, Command | Permission review, Network, Command |
|---|
| | | |
|---|
| Source & provenance |
|---|
| Shuyib/tool_calling_api | ralouta/ArcGIS-JavaScript-AI-Component | openai/skills/tree/main/skills/.curated/security-ownership-map |
|---|
| Dev & Engineering | Dev & Engineering | Data & Analytics |
|---|
|
|---|
| Risk & permission signals |
|---|
| No explicit signals | needs credentials | writes files |
|---|
| repository clone, local runtime dependencies | repository clone, local runtime dependencies | registry access, remote metadata pull, runtime dependencies may be required |
|---|
| Install & compatibility |
|---|
| Universal | Universal | Claude, Codex, Cursor, Universal |
|---|
| script-backed | script-backed | registry-install |
|---|
|
|---|
| Community |
|---|
| 20 | 4 | |
|---|