| Pre-install decision |
|---|
| 82 · Manual review | 84 · Manual review | |
|---|
| Clear source, High execution risk, Claude | Clear source, High execution risk, Claude | Clear source, High execution risk, Universal |
|---|
| | | High |
|---|
| data exfiltration, human approval gap | prompt injection, tool poisoning, identity privilege abuse | unexpected code execution, identity privilege abuse, data exfiltration |
|---|
| missing license, network without allowlist, no human approval | missing license, broad permissions, network without allowlist | missing license, shell without guardrails, network without allowlist |
|---|
| Network, Command | Permission review, Network, Secrets, Command | Permission review, Network, Secrets, Command |
|---|
| 63% | | 67% |
|---|
| Source & provenance |
|---|
| nextlevelbuilder/ui-ux-pro-max-skill/tree/main/.claude/skills/ui-ux-pro-max | UseAI-pro/openclaw-skills-security | openclaw/skills |
|---|
| Design & Content | Productivity & Docs | Design & Content |
|---|
|
|---|
| Risk & permission signals |
|---|
| No explicit signals | needs credentials | needs credentials, network access |
|---|
| registry access, remote metadata pull, runtime dependencies may be required | local skill installation, workspace file updates | verify source provenance before install |
|---|
| Install & compatibility |
|---|
| Claude, Codex, Cursor, Universal | Claude, Codex, Cursor, Windsurf | Universal |
|---|
| registry-install | instruction-only | script-backed |
|---|
|
|---|
| Community |
|---|
| | 48 | 0 |
|---|