# Productivity CLI packages

Productivity CLIs and desktop-adjacent tools that agents may use for notes, documents, mail, calendars, and workflow automation.

- **Packages:** 825
- **Protected tools:** 0
- **Approval gates:** 2
- **Non-low risk:** 169
- **Updated:** 2026-08-03

## Why this package group is here

Productivity CLI packages currently includes 825 package catalog entries. 0 have protected-tool coverage, 2 have approval-gate metadata, and 169 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.

## Generated source

This hub uses the same local package data as individual package pages: Nucleus package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.

## Review model

Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.

## Indexed package pages

- [gh](https://pkg.so/pkg/brew/gh/) - 7 approval-gate rules are present.
- [awscli](https://pkg.so/pkg/brew/awscli/) - 8 approval-gate rules are present.
- [gradle](https://pkg.so/pkg/brew/gradle/) - build system capable of executing project logic
- [go-task](https://pkg.so/pkg/brew/go-task/) - generalized runtime or code generation signal
- [powershell](https://pkg.so/pkg/brew/powershell/) - generalized runtime or code generation signal
- [doxygen](https://pkg.so/pkg/brew/doxygen/) - generalized runtime or code generation signal
- [parallel](https://pkg.so/pkg/brew/parallel/) - broad file, network, media, or database tool signal
- [groovysdk](https://pkg.so/pkg/brew/groovysdk/) - generalized runtime or code generation signal
- [autojump](https://pkg.so/pkg/brew/autojump/) - generalized runtime or code generation signal
- [byobu](https://pkg.so/pkg/brew/byobu/) - generalized runtime or code generation signal
- [jiratui](https://pkg.so/pkg/brew/jiratui/) - generalized runtime or code generation signal
- [docker-agent](https://pkg.so/pkg/brew/docker-agent/) - generalized runtime or code generation signal
- [translate-shell](https://pkg.so/pkg/brew/translate-shell/) - generalized runtime or code generation signal
- [rofi](https://pkg.so/pkg/brew/rofi/) - generalized runtime or code generation signal
- [intelli-shell](https://pkg.so/pkg/brew/intelli-shell/) - generalized runtime or code generation signal
- [tasksh](https://pkg.so/pkg/brew/tasksh/) - generalized runtime or code generation signal
- [murex](https://pkg.so/pkg/brew/murex/) - generalized runtime or code generation signal
- [fb-client](https://pkg.so/pkg/brew/fb-client/) - broad file, network, media, or database tool signal
- [doitlive](https://pkg.so/pkg/brew/doitlive/) - generalized runtime or code generation signal
- [pyp](https://pkg.so/pkg/brew/pyp/) - generalized runtime or code generation signal
- [boot-clj](https://pkg.so/pkg/brew/boot-clj/) - generalized runtime or code generation signal
- [cargo-make](https://pkg.so/pkg/brew/cargo-make/) - generalized runtime or code generation signal
- [exim](https://pkg.so/pkg/brew/exim/) - generalized runtime or code generation signal
- [recur](https://pkg.so/pkg/brew/recur/) - generalized runtime or code generation signal
- [nmh](https://pkg.so/pkg/brew/nmh/) - generalized runtime or code generation signal
- [shell2http](https://pkg.so/pkg/brew/shell2http/) - broad file, network, media, or database tool signal
- [sbuild](https://pkg.so/pkg/brew/sbuild/) - generalized runtime or code generation signal
- [dropbox-uploader](https://pkg.so/pkg/brew/dropbox-uploader/) - broad file, network, media, or database tool signal
- [mdsh](https://pkg.so/pkg/brew/mdsh/) - generalized runtime or code generation signal
- [omake](https://pkg.so/pkg/brew/omake/) - generalized runtime or code generation signal
- [empty](https://pkg.so/pkg/brew/empty/) - generalized runtime or code generation signal
- [desk](https://pkg.so/pkg/brew/desk/) - generalized runtime or code generation signal
- [sexpect](https://pkg.so/pkg/brew/sexpect/) - generalized runtime or code generation signal
- [ngs](https://pkg.so/pkg/brew/ngs/) - generalized runtime or code generation signal
- [xe](https://pkg.so/pkg/brew/xe/) - generalized runtime or code generation signal
- [ppss](https://pkg.so/pkg/brew/ppss/) - generalized runtime or code generation signal
- [gnupg](https://pkg.so/pkg/brew/gnupg/) - no executable entrypoint in the package index
- [yq](https://pkg.so/pkg/brew/yq/) - narrow executable package without higher-risk signals
- [tmux](https://pkg.so/pkg/brew/tmux/) - no executable entrypoint in the package index
- [pandoc](https://pkg.so/pkg/brew/pandoc/) - narrow executable package without higher-risk signals
- [just](https://pkg.so/pkg/brew/just/) - no executable entrypoint in the package index
- [watchman](https://pkg.so/pkg/brew/watchman/) - no executable entrypoint in the package index
- [vim](https://pkg.so/pkg/brew/vim/) - no executable entrypoint in the package index
- [ansible](https://pkg.so/pkg/brew/ansible/) - no executable entrypoint in the package index
- [hugo](https://pkg.so/pkg/brew/hugo/) - narrow executable package without higher-risk signals
- [actionlint](https://pkg.so/pkg/brew/actionlint/) - no executable entrypoint in the package index
- [fastlane](https://pkg.so/pkg/brew/fastlane/) - no executable entrypoint in the package index
- [md4c](https://pkg.so/pkg/brew/md4c/) - narrow executable package without higher-risk signals
- [sphinx-doc](https://pkg.so/pkg/brew/sphinx-doc/) - no executable entrypoint in the package index
- [jbig2dec](https://pkg.so/pkg/brew/jbig2dec/) - library-like package without higher-risk signals
- [cliclick](https://pkg.so/pkg/brew/cliclick/) - narrow executable package without higher-risk signals
- [terraform-docs](https://pkg.so/pkg/brew/terraform-docs/) - no executable entrypoint in the package index
- [television](https://pkg.so/pkg/brew/television/) - no executable entrypoint in the package index
- [qwen-code](https://pkg.so/pkg/brew/qwen-code/) - no executable entrypoint in the package index
- [zellij](https://pkg.so/pkg/brew/zellij/) - no executable entrypoint in the package index
- [ocrmypdf](https://pkg.so/pkg/brew/ocrmypdf/) - narrow executable package without higher-risk signals
- [ansible-lint](https://pkg.so/pkg/brew/ansible-lint/) - no executable entrypoint in the package index
- [glow](https://pkg.so/pkg/brew/glow/) - narrow executable package without higher-risk signals
- [docutils](https://pkg.so/pkg/brew/docutils/) - narrow executable package without higher-risk signals
- [docbook-xsl](https://pkg.so/pkg/brew/docbook-xsl/) - narrow executable package without higher-risk signals
- [overmind](https://pkg.so/pkg/brew/overmind/) - narrow executable package without higher-risk signals
- [texinfo](https://pkg.so/pkg/brew/texinfo/) - narrow executable package without higher-risk signals
- [plantuml](https://pkg.so/pkg/brew/plantuml/) - no executable entrypoint in the package index
- [lefthook](https://pkg.so/pkg/brew/lefthook/) - no executable entrypoint in the package index
- [typst](https://pkg.so/pkg/brew/typst/) - narrow executable package without higher-risk signals
- [goreman](https://pkg.so/pkg/brew/goreman/) - narrow executable package without higher-risk signals
- [tealdeer](https://pkg.so/pkg/brew/tealdeer/) - narrow executable package without higher-risk signals
- [agent-browser](https://pkg.so/pkg/brew/agent-browser/) - no executable entrypoint in the package index
- [prettier](https://pkg.so/pkg/brew/prettier/) - narrow executable package without higher-risk signals
- [gogcli](https://pkg.so/pkg/brew/gogcli/) - no executable entrypoint in the package index
- [psutils](https://pkg.so/pkg/brew/psutils/) - narrow executable package without higher-risk signals
- [midnight-commander](https://pkg.so/pkg/brew/midnight-commander/) - narrow executable package without higher-risk signals
