Pack comparison
Two packs, side-by-side. Merged comparisons, shared shape, and diff highlights in one view.
injection-surface-audit
Every agent product ships injection surfaces. Audit them before an attacker does.
Install
npx attrition-sh pack install injection-surface-auditToken budget
—
Pass rate
—
Avg tokens
—
Publisher
Agent Workspace
Compatibility
session-persistence-three-channels
Append-only JSONL across 3 channels. Permissions never restore on resume — the friction IS the safety.
Install
npx attrition-sh pack install session-persistence-three-channelsToken budget
0
Pass rate
—
Avg tokens
—
Publisher
Agent Workspace
Compatibility
Contract summary
3 required outputs, 1 permissions, 2 completion conditions.
out: .transcripts/<session>.jsonl
Shared shape
What both packs have in common
Overlap across canonical pattern, compatibility, tags, and required packs.
Compatibility
Merged comparisons
Head-to-head claims from both packs
Each row is attributed to the pack that authored it. The winner column is normalised to this compare view (A / B / Tie).
| Source | Alternative | Axis | Winner | Note |
|---|---|---|---|---|
| A | owasp-llm-top10 | maintainability | A | OWASP LLM Top-10 is a vocabulary; this pack is an actionable checklist tied to specific code patterns. Use together: OWASP for framing, this pack for line-level audit. |
| A | llm-guardrails-middleware | complexity | Alternative | Runtime guardrail middleware (NeMo, Guardrails AI) adds automated filtering — lower manual effort, adds a dependency. This pack is zero-runtime and targets design-time holes. Layered defence uses both. |
| A | red-team-engagement | accuracy | Alternative | A professional red-team engagement finds novel classes a checklist can't. Use this pack monthly; commission a red-team annually. |
| B | claude-code-guide | complexity | Alternative | Claude Code Guide covers session memory in one section; this pack is the dedicated persistence specification with the deliberate-non-feature framing. |
| B | subagent-delegation-three-isolation-modes | maintainability | Tie | This pack documents session + global channels; subagent-delegation documents the sidechain channel. Stack them for full 3-channel coverage. |
| B | injection-surface-audit | accuracy | Tie | The permissions-non-restoration invariant is one of the audit's checks. This pack names the invariant; that pack verifies nothing erodes it. |
Diff highlights
What each pack brings that the other doesn't
Unique coverage and any measurable gap between the two.
Unique to A — Injection Surface Audit
Comparisons not in B
Compatibility A-only
Tags A-only
Unique to B — Session Persistence — Three Channels
Comparisons not in A
Compatibility B-only
Tags B-only
Swap / reset