Install payload
Install payload is broadly covered in current results.
75% (6/8)
Source-backed filter active — add entries to compare trust side by side.
8 results in this view
2 trust signals differ in this sample: Source provenance, Submitter
Signals differ on Source provenance, Submitter — add entries to compare before you install.
Rollout signal scan
Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.
Install payload
Install payload is broadly covered in current results.
75% (6/8)
Most at-risk entries in this view
Adoption queue
2/8 visible results are in hold tier and need mitigation before adoption.
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
commands/pr-security-review · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
skills/addy-osmani-agent-skills · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/large-generated-diff-detector · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/pal-mcp-server · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/roam-code · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
skills/superpowers-skills · trust review · confidence 67%
2 blockers: Metadata review, Install payload
36/100
Request metadata review from maintainers or internal owners.
Add install/config payload for reproducible team rollout.
Collect package checksum or signed artifact information.
tools/gitleaks · trust review · confidence 50%
2 blockers: Metadata review, Install payload
36/100
Request metadata review from maintainers or internal owners.
Add install/config payload for reproducible team rollout.
Collect package checksum or signed artifact information.
tools/semgrep · trust review · confidence 50%
Decision confidence
2/8 results are low-confidence and need review before adoption.
Address Metadata review, Package integrity before broader rollout.
54/100
commands/pr-security-review · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
skills/addy-osmani-agent-skills · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
hooks/large-generated-diff-detector · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
mcp/pal-mcp-server · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
mcp/roam-code · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
skills/superpowers-skills · trust review
Hold adoption until Metadata review, Package integrity are resolved.
36/100
tools/gitleaks · trust review
Hold adoption until Metadata review, Package integrity are resolved.
36/100
tools/semgrep · trust review
Freshness distribution
Median age 53 days; all 8 scanned entries are within 90 days.
Theme distribution
100% of this view shares the top theme. Leading themes: code-review, security, agent-skills.
30 distinct themes across 8 scanned
Addy Osmani's production-grade Agent Skills pack for AI coding agents, with lifecycle slash commands, engineering workflow skills, review personas, quality gates, and cross-agent setup guidance for Claude Code, Cursor, Gemini CLI, Antigravity CLI, OpenCode, GitHub Copilot, and other agents.
MIT-licensed skill and plugin framework by Jesse Vincent for Claude Code, Codex, Cursor, Gemini CLI, OpenCode, and other AI coding agents, covering brainstorming, planning, TDD, systematic debugging, subagent-driven development, code review, git worktrees, and finish-the-branch workflows.
Slash command that reviews a pull request diff for security regressions: authentication and authorization gaps, injection surfaces, secret exposure, unsafe deserialization, and dependency risk introduced by the change.
Local codebase intelligence CLI and MCP server that gives Claude a SQLite code graph, change-safety gates, code health checks, impact analysis, review tools, and audit evidence for agent-assisted coding.
Provider Abstraction Layer MCP server for orchestrating multiple AI models, external AI CLIs, planning, consensus, code review, debugging, and delegated sub-agent workflows from one MCP client.
PostToolUse hook that flags two review hazards as Claude writes files: edits to generated or vendored artifacts (lockfiles, minified bundles, source maps, dist/build output, snapshots, protobuf output) and oversized diffs that change more lines than a configurable threshold versus the committed version.
Open-source secret scanner for finding passwords, API keys, tokens, and other credentials in git history, files, directories, and stdin.
Static analysis platform and open-source CLI for finding bugs, security issues, secrets, dependency risk, and custom rule matches in code.