quivr
Repository: quivr
Author: QuivrHQ · Source status: Clear source
Opiniated RAG for integrating GenAI in your apps 🧠 Focus on your product rather than the RAG.
Score basis:Clear source · Risk needs review · Universal
Repository: terraform-genai-knowledge-base
Author: GoogleCloudPlatform · Source status: Clear source
Fine tune an LLM model to answer questions from your documents.
Score basis:Clear source · Risk needs review · Universal
Trust level
89 · High trust
Strong recovered source and maintenance signals.
Risk decision
Review required
metadata-only
Install readiness
script-backed · copy-only command
SkillTrust only shows install guidance and copy actions; it never executes installs.
Before you install
Review source, permissions, and execution risk first, then alternatives. Scores prioritize review; they do not replace manual judgment.
Review weakest dimensions and next actions before copying commands.
Evidence or risk signals are incomplete; compare alternatives first.
Audit grade
C · Review first
Execution risk
High
Evidence confidence
67%
SAS-v2.1 radar
SAS-v2.1
Audit grade
C · Review first
Execution risk
High
Top threats
unexpected code execution, data exfiltration
Control gaps
missing license, broad permissions
Evidence confidence
67%
Repository
GoogleCloudPlatform/terraform-genai-knowledge-base
Author
GoogleCloudPlatform
Community signal
159 stars · 82 forks
Last updated
2026-04-14
Primary source
GoogleCloudPlatform/terraform-genai-knowledge-base
Source status
Clear source
Install method
script-backed
Command & code execution
34Focus: Whether it runs commands or scripts
Next action: Manually confirm command-running skills in an isolated directory.
High-risk action confirmation
38Focus: Whether destructive or external actions require confirmation
Next action: Avoid directly installing high-risk skills without confirmation controls.
Network & data egress
43Focus: Whether it may send data out
Next action: If unsure, restrict network access or allow only known domains.
Supported tools can change install steps; Universal entries need source review.
Explicitly supported
git clone https://github.com/GoogleCloudPlatform/terraform-genai-knowledge-base.gitmetadata-only
Review source and permissions before copying install commands.
Evidence or risk signals are incomplete; compare alternatives first.
Focus: Who published it and whether it is traceable
Next action: Review repository, author, and README first; do not install directly when source is pending.
Focus: Whether install steps can be reviewed
Next action: Prefer candidates with install docs and repository evidence.
Focus: Whether tool descriptions may hide instructions
Next action: Read README, rules, and tool descriptions before install.
Focus: What it can access
Next action: Grant only task-required permissions and prefer Ask/manual confirmation.
Focus: Whether it runs commands or scripts
Next action: Manually confirm command-running skills in an isolated directory.
Focus: Whether file reads/writes can escape scope
Next action: Check working directory and file access scope before running.
Focus: Whether it may send data out
Next action: If unsure, restrict network access or allow only known domains.
Focus: Whether it handles tokens, private keys, or agent identity
Next action: Do not provide long-lived tokens or private keys to source-pending skills.
Focus: Whether external content can steer behavior
Next action: For browser/RAG/rules skills, review permissions and confirmation controls first.
Focus: Whether memory or retrieved context can be poisoned
Next action: Try RAG/memory skills in a low-privilege environment first.
Focus: Whether external tools and MCP access are clearly bounded
Next action: Confirm which external tools it will connect to before install, and start with the smallest possible set.
Focus: Whether destructive or external actions require confirmation
Next action: Avoid directly installing high-risk skills without confirmation controls.
Focus: How far impact can spread when something goes wrong
Next action: If unsure, test in an isolated project first.
Focus: Whether actions can be traced
Next action: Prefer candidates with logs or previews.
Focus: Whether it is maintained and reusable
Next action: Check license and maintenance before organizational use.
Strong recovered source and maintenance signals.
Phase 1 only shows installation-aware, source-backed signals. SkillTrust does not execute install scripts for users.
Risk factors
metadata-only
Permission hints
repository clone
Why related: Same task category, Keyword overlap...
Why related: Same task category, Keyword overlap, Similar install method
Repository: claude-code-router
Author: musistudio · Source status: Clear source
Use Claude Code as the foundation for coding infrastructure, allowing you to decide how to interact with the model while enjoying updates from Anthropic.
Score basis:Clear source · Risk needs review · Universal
Why related: Same task category, Keyword overlap...
Why related: Same task category, Keyword overlap, Similar install method
Repository: storm
Author: stanford-oval · Source status: Clear source
An LLM-powered knowledge curation system that researches a topic and generates a full-length report with citations.
Score basis:Clear source · Risk needs review · Universal
Why related: Same task category, Keyword overlap...
Why related: Same task category, Keyword overlap, Similar install method
Repository: andrej-karpathy-skills
Author: forrestchang · Source status: Clear source
A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.
Score basis:Clear source · Risk needs review · Universal
Why related: Same task category, Keyword overlap...
Why related: Same task category, Keyword overlap, Similar install method
Repository: LLMs-from-scratch
Author: rasbt · Source status: Clear source
Implement a ChatGPT-like LLM in PyTorch from scratch, step by step
Score basis:Clear source · Risk needs review · Universal
Why related: Same task category, Keyword overlap...
Why related: Same task category, Keyword overlap, Similar install method
Repository: llm-course
Author: mlabonne · Source status: Clear source
Course to get into Large Language Models (LLMs) with roadmaps and Colab notebooks.
Score basis:Clear source · Risk needs review · Universal
Why related: Same task category, Keyword overlap...
Why related: Same task category, Keyword overlap, Similar install method
Repository: kubectl-ai
Author: GoogleCloudPlatform · Source status: Clear source
AI powered Kubernetes Assistant
Score basis:Clear source · Risk needs review · Universal
Repository: agent-starter-pack
Author: GoogleCloudPlatform · Source status: Clear source
Ship AI Agents to Google Cloud in minutes, not months.
Score basis:Clear source · Risk needs review · Universal
Repository: vertex-ai-samples
Author: GoogleCloudPlatform · Source status: Clear source
Notebooks, code samples, sample apps, and other resources that demonstrate how to use, develop and manage machine learning and generative AI workflows using Google Cloud Vertex AI.
Score basis:Clear source · Risk needs review · Universal
Repository: Open_Data_QnA
Author: GoogleCloudPlatform · Source status: Clear source
The Open Data QnA python library enables you to chat with your databases by leveraging LLM Agents on Google Cloud.
Score basis:Clear source · Risk needs review · Universal