Compare two AI tools side by side
Put any two skills or MCP servers next to each other: risk grade, what each can access, how popular it is, and how to install it.
| What | @earendil-works/pi-mcp | how-claude-code-works |
|---|---|---|
| Risk grade | CC · Moderate risk signals Based on public adoption and transparency signals as of Oct 28, 2026. Our opinion, not a code audit or security guarantee. | CC · Moderate risk signals Based on public adoption and transparency signals as of Oct 21, 2026. Our opinion, not a code audit or security guarantee. |
| Type | App connector | App connector |
| Est. context load | ~850 tokens / turn (~5 tool schemas, 0.43% of 200k context) | ~550 tokens / turn (~3 tool schemas, 0.27% of 200k context) |
| GitHub stars | — | 3.8k |
| Weekly npm downloads | 2.9M | — |
| Local files | No local folder access noted | No local folder access noted |
| Command execution | No shell command runner noted | Runs shell or system commands |
| Network reach | Connects to outside service API | Connects to outside service API |
| Credentials | Requires API key or token | No API token required |
| Package source | npm (@earendil-works/pi-mcp) | GitHub (Windy3f3f3f3f/how-claude-code-works) |
| Install command | npx -y @earendil-works/pi-mcp | Source repo only |
| Bottom line | This tool is largely unknown in the community, handles sensitive system access through MCP, and lacks public auditing—use only if you fully trust the creator and carefully limit what data and systems it can reach. | how-claude-code-works is distributed via GitHub (Windy3f3f3f3f/how-claude-code-works); review its source code, dependencies, and requested permissions before use. |
Based on public adoption and transparency signals as of Oct 29, 2026. Our opinion, not a code audit or security guarantee.
Go deeper
Want to inspect exact published files, install hooks and network hosts?
Run a pre-install check on any package, MCP config or SKILL.md, or open a full report with PDF export.