AdYour product here, seen by people installing AI tools every day

CLAUDE.md NPM Project Poisoning vs gh-attach

CLAUDE.md NPM Project Poisoning and gh-attach are both developer tools skills. gh-attach scores higher (89 vs 22 out of 100). gh-attach has more GitHub stars (40k), and gh-attach was updated more recently (yesterday). The table compares them side by side.

CLAUDE.md NPM Project Poisoninggh-attach
Score22 / 10089 / 100
What it doesDeveloper task helper.Uploads a local file (screenshot, image, PDF, zip, video) to GitHub user-attachments, downloads GitHub user-attachments, and embeds local files in a PR, issue, or comment. Use when asked to "attach a screenshot to the PR", "add an image to the issue", "embed before/after screenshots", "attach this file", or "download this GitHub attachment". Powered by `gh-attach`.
PublisherCommunity: qyb156Community: github
GradesMaintenance A, Licence F, Quality DMaintenance A, Licence A, Quality A
npm downloads a weekNot on npmNot on npm
RunsSkillSkill
Works withClaude Code, Claude appsClaude Code, Claude apps
GitHub stars140,340
Last commit30 Sept 202623 Oct 2026
LicenceNone foundMIT
Listed since19 Oct 202622 Oct 2026
Install CLAUDE.md NPM Project PoisoningInstall gh-attach

Questions

Is CLAUDE.md NPM Project Poisoning or gh-attach more popular?

gh-attach has more GitHub stars: 40,340.

Can I use CLAUDE.md NPM Project Poisoning and gh-attach together?

Yes. AI assistants can load several skills at once. Install both and the assistant picks the right one for each task.