security-review (everything-claude-code) vs setup-pre-commit (mattpocock/skills)
security-review (everything-claude-code)
24.9 / 30
SituationalSafe
ECC security-review: no better at finding planted vulnerabilities than plain Codex, at about the same tokens
- SOTAPass
setup-pre-commit (mattpocock/skills)
29.0 / 30
RecommendedSafe
setup-pre-commit: for a vague 'add commit hooks' request plain Codex builds a different (native git hook) setup, even calling npm in a pnpm repo (seen in one run); the skill and a one-sentence prompt both give the Husky + lint-staged setup (5.0 vs 1.4)
- SOTAPass