Agent Workspace

Pack comparison

Two packs, side-by-side. Merged comparisons, shared shape, and diff highlights in one view.

ACommunitysecurityv0.1.0Recommended
Injection Surface Audit

injection-surface-audit

Every agent product ships injection surfaces. Audit them before an attacker does.

npx attrition-sh pack install injection-surface-audit

Token budget

Pass rate

Avg tokens

Publisher

Agent Workspace

claude-codecursorcodex-cliany-agent-harness
BCommunityreferencev0.1.0Recommended
Extensibility — Four Mechanisms

extensibility-four-mechanisms

Hooks → Skills → Plugins → MCP. Graduated context cost, three injection points, one decision tree.

npx attrition-sh pack install extensibility-four-mechanisms

Token budget

Pass rate

Avg tokens

Publisher

Agent Workspace

claude-codecursorcodex

What both packs have in common

Overlap across canonical pattern, compatibility, tags, and required packs.

claude-codecursor

Head-to-head claims from both packs

Each row is attributed to the pack that authored it. The winner column is normalised to this compare view (A / B / Tie).

SourceAlternativeAxisWinnerNote
Aowasp-llm-top10maintainabilityAOWASP LLM Top-10 is a vocabulary; this pack is an actionable checklist tied to specific code patterns. Use together: OWASP for framing, this pack for line-level audit.
Allm-guardrails-middlewarecomplexityAlternativeRuntime guardrail middleware (NeMo, Guardrails AI) adds automated filtering — lower manual effort, adds a dependency. This pack is zero-runtime and targets design-time holes. Layered defence uses both.
Ared-team-engagementaccuracyAlternativeA professional red-team engagement finds novel classes a checklist can't. Use this pack monthly; commission a red-team annually.
Bclaude-code-guidecomplexityAlternativeClaude Code Guide is the 10-section onboarding reference; extensibility is one section. This pack is the decision tree for choosing among Hooks/Skills/Plugins/MCP specifically.
Binjection-surface-auditaccuracyTieThis pack places extensions at injection points; injection-surface-audit audits them for hostile content. Use this to choose, that to harden.
Bpattern-decision-treemaintainabilityTiePattern decision tree picks an agent pattern; this pack picks an extensibility mechanism. Orthogonal decisions; use both.

What each pack brings that the other doesn't

Unique coverage and any measurable gap between the two.

Comparisons not in B

owasp-llm-top10llm-guardrails-middlewarered-team-engagement

Compatibility A-only

codex-cliany-agent-harness

Tags A-only

securityprompt-injectionssrfauditowasp-llmsupply-chain

Comparisons not in A

claude-code-guideinjection-surface-auditpattern-decision-tree

Compatibility B-only

codex

Tags B-only

referenceextensibilityhooksskillspluginsmcptool-poolclaude-codedive-into-claude-code