Pre-install eval
grok-media Eval report.
A machine-readable install decision for agents: task fit, Trust Score, Audit Score, install safety, permission surface, and a concrete validation plan before this skill touches a workspace.
manual review
Test manually in an isolated workspace and compare against safer alternatives.
Required gates
Checks an agent must pass before install
Task fit
70
Task fit is weak; compare alternatives before selecting.
- Evaluate grok-media before installing it in an agent workflow
- design-creative
- Design and creative workflows; Claude Code teams; teams that value GitHub adoption signals
Install path
92
Install handoff is available.
- npx skills add calesthio/OpenMontage --skill grok-media
Install command safety
92
standard package or runtime install path
- npx skills add calesthio/OpenMontage --skill grok-media
Trust score
72
Good trust signals with a few areas worth checking before rollout.
- Strong shortlist
- 56K GitHub stars
- AGPL-3.0
Audit score
82
Needs review
- Permission surface may require sandboxing
Agent safety gate
54
Sparse or mixed signals. Useful for discovery, but not for autonomous installation.
- Test manually in an isolated workspace and compare against safer alternatives.
- High-risk permission hints: Secrets or environment access
License clarity
86
AGPL-3.0
- AGPL-3.0
Permission surface
60
secrets or environment access, network or browser access
- Browser automation: medium
- Network access: medium
- Secrets or environment access: high
Validation plan
What the agent should do next
- 1Inspect repository, README/SKILL.md, license, and recent commits before production use.
- 2Install in an isolated workspace or sandbox with no production secrets available.
- 3Run the smallest representative task and record files touched, commands run, network access, and outputs.
- 4Compare the selected skill against at least one alternative when the eval status is review or failed.
- 5Promote only after the agent reports a successful verification result and unresolved warnings are accepted.
Do not use when
Conditions that require another skill
- teams that need a vendor-supported SLA
- production agents without a repository review
- SKILL.md does not include a full request/response example, which may lead agents to construct malformed API calls.
- High-risk permission hints: Secrets or environment access
- Permission surface may require sandboxing
- No explicit handling of rate limits or retry-backoff behavior for xAI media endpoints.
Supporting checks
Trust signals behind the decision
README/SKILL.md completeness
warn76
Public metadata needs stronger README/SKILL.md context
Recent maintenance
pass88
2mo since push
Alternatives available
pass82
Alternative skills are available for comparison.