Gram
Repository: gram
Author: speakeasy-api · Source status: Clear source
Securely scale AI usage across your organization.
Score basis:Clear source · High execution risk · Universal · Evidence completeness 65%
Compare skills
Pick 2–4 skills and compare what really matters: fit, risk, install effort, and community signal.
Selected skills (2/4)
Comparison matrix
Highlights show current best; tooltip explains diff/best rules.
Score-basis diff rules / risk tag notes
Start with the matrix. Open this section when you need to understand audit grades, top threats, control gaps, and best-value highlights.
Suggested baseline
Search to add skills, or paste 2–4 comma-separated slugs.
How differences are detected
A row is marked different when selected skills have distinct values. Only-differences mode hides rows that are identical.
How best values are highlighted
Pre-install score, evidence completeness, and community signal prefer higher values; execution risk and install friction prefer lower values.
How to read risk tags
Risk tags come from SAS-v2.1 public-evidence signals and point to command, network, secret, context, or supply-chain items to review before install.
Selected audit signals
zypher-agent
Execution risk:High
Threat tags:unexpected code execution, data exfiltration, human approval gap
Control gaps:missing license, broad permissions, shell without guardrails
splitrail
Execution risk:High
Threat tags:unexpected code execution, identity privilege abuse, data exfiltration
Control gaps:missing license, broad permissions, shell without guardrails
| Dimension | zypher-agent | splitrail |
|---|---|---|
| Pre-install decision | ||
Pre-install score | 76 · Manual review | 82 · Manual review |
Score basis | Clear source, High execution risk, Universal | Clear source, High execution risk, Universal |
Execution risk | High | High |
Threat tags | unexpected code execution, data exfiltration, human approval gap | unexpected code execution, identity privilege abuse, data exfiltration |
Control gaps | missing license, broad permissions, shell without guardrails | missing license, broad permissions, shell without guardrails |
Permission summary | Permission review, Network, Command | Permission review, Network, Secrets, Command |
Evidence completeness | 65% | 67% |
| Source & provenance | ||
Provenance | corespeed-io/zypher-agent | Piebald-AI/splitrail |
Category | Dev & Engineering | Dev & Engineering |
Freshness | 2026-03-05 | |
| Risk & permission signals | ||
Audit signals | runs shell | needs credentials |
Permission hints | repository clone, local runtime dependencies | local runtime dependencies, repository clone |
| Install & compatibility | ||
Supported tools | Universal | Universal |
Install method | script-backed | script-backed |
Install friction | ||
| Community | ||
Stars | 358 | 150 |
Repository: agentic-ai-engineering
Author: agenticloops-ai · Source status: Clear source
Hands-on tutorials for building AI agents from scratch.
Score basis:Clear source · High execution risk · Universal · Evidence completeness 68%
Repository: NVIDIA-Nemotron-3-Super
Author: cobusgreyling · Source status: Clear source
Controllable reasoning demos for NVIDIA Nemotron 3 Super (120B/12B MoE) — chat UI, CLI, API server, tool calling, budget sweep, and adaptive routing Topics: gradio, llm, mixture-of-experts, moe, nemotron, nim, nvidia, re
Score basis:Clear source · High execution risk · Universal · Evidence completeness 65%
Repository: opencode-glm-quota
Author: guyinwonder168 · Source status: Clear source
Opencode plugin to query Z.ai GLM Coding Plan usage statistics with real-time quota monitoring, model usage tracking, and MCP Tools usage Topics: ci-cd, github-actions, glm, opencode, plugin, quota-monitoring, typescript
Score basis:Clear source · High execution risk · Universal · Evidence completeness 65%
55 |