生成来源
此 hub 使用与单个软件包页面相同的本地数据：Nucleus 软件包元数据、Homebrew 增强数据、Geiger 分类器输出、密钥处理 manifest，以及可用的审批门种子。
security
Secret-risk packages
Packages with protected-tool coverage, approval-gate metadata, or non-low Geiger findings deserve explicit review before agents run them.
软件包摘要
为什么存在这个软件包组
Secret-risk packages 当前包含 2145 个生成的软件包页面。0 个有受保护工具覆盖，18 个有审批门元数据，2138 个有非低级 Geiger 分类结果。分组来自软件包元数据，因此可随数据变化保持更新。
审查模型
使用此 hub 查找在代理运行前需要更严格密钥注入、审批门或人工审查的命令族。
高信号工具
带审批门的工具
相关 hub
代表性软件包页面
sqlitedoc example: bounded database toolxzbroad file, network, media, or database tool signalnode存在 7 条审批门规则。gh存在 7 条审批门规则。zstdbroad file, network, media, or database tool signalawscli存在 8 条审批门规则。lz4broad file, network, media, or database tool signalffmpeg存在 4 条审批门规则。pkgconf存在 3 条审批门规则。cmake存在 6 条审批门规则。uv存在 6 条审批门规则。jpeg-turbobroad file, network, media, or database tool signalgo存在 7 条审批门规则。git存在 6 条审批门规则。brotlibroad file, network, media, or database tool signalopenexrbroad file, network, media, or database tool signal
软件包
已索引的软件包页面
| 软件包 | 管理器 | 信号 | 原因 |
|---|---|---|---|
| node | Homebrew | 审批门, 风险级别：yellow, v26.5.1 | 7 approval-gate rules are present. |
| cmake | Homebrew | 审批门, 风险级别：yellow, v4.4.2 | 6 approval-gate rules are present. |
| go | Homebrew | 审批门, 风险级别：yellow, v1.26.5 | 7 approval-gate rules are present. |
| pkgconf | Homebrew | 审批门, 风险级别：绿色, v3.0.5 | 3 approval-gate rules are present. |
| uv | Homebrew | 审批门, v0.12.1 | 6 approval-gate rules are present. |
| gemini-cli | Homebrew | 审批门, v0.46.0 | 5 approval-gate rules are present. |
| xcbeautify | Homebrew | 审批门, 风险级别：绿色, v3.2.1 | 2 approval-gate rules are present. |
| jq | Homebrew | 审批门, 风险级别：绿色, v1.8.2 | 3 approval-gate rules are present. |
| mkcert | Homebrew | 审批门, 风险级别：绿色, v1.4.4 | 4 approval-gate rules are present. |
| gh | Homebrew | 审批门, 风险级别：blue, v2.97.0 | 7 approval-gate rules are present. |
| awscli | Homebrew | 审批门, v2.36.14 | 8 approval-gate rules are present. |
| ffmpeg | Homebrew | 审批门, 风险级别：blue, v8.1.2 | 4 approval-gate rules are present. |
| git | Homebrew | 审批门, 风险级别：blue, v2.55.0 | 6 approval-gate rules are present. |
| coreutils | Homebrew | 审批门, 风险级别：blue, v9.11 | 8 approval-gate rules are present. |
| imagemagick | Homebrew | 审批门, 风险级别：blue, v7.1.2-29 | 5 approval-gate rules are present. |
| pyenv | Homebrew | 审批门, 风险级别：orange, v2.8.1 | 5 approval-gate rules are present. |
| docker | Homebrew | 审批门, 风险级别：orange, v29.7.1 | 6 approval-gate rules are present. |
| mise | Homebrew | 审批门, 风险级别：orange, v2026.8.0 | 6 approval-gate rules are present. |
| gcc | Homebrew | 风险级别：yellow, v16.1.0 | compiler and toolchain runtime |
| llvm | Homebrew | 风险级别：yellow, v22.1.8 | compiler and toolchain runtime |
| openjdk | Homebrew | 风险级别：yellow, v26.0.2 | Java runtime and development kit |
| ruby | Homebrew | 风险级别：yellow, v4.0.6 | doc example: interpreter runtime |
| util-linux | Homebrew | 风险级别：yellow, v2.42.2 | generalized runtime or code generation signal |
| deno | Homebrew | 风险级别：yellow, v2.9.4 | doc example: JavaScript runtime |
| ninja | Homebrew | 风险级别：yellow, v1.13.2 | build system capable of executing project logic |
| luajit | Homebrew | 风险级别：yellow, v2.1.1785606157 | generalized runtime or code generation signal |
| bash | Homebrew | 风险级别：yellow, v5.3.15 | doc example: shell runtime |
| maven | Homebrew | 风险级别：yellow, v3.9.16 | build system capable of executing project logic |
| ghostscript | Homebrew | 风险级别：yellow, v10.07.1 | generalized runtime or code generation signal |
| lua | Homebrew | 风险级别：yellow, v5.5.0 | doc example: interpreter runtime |
| starship | Homebrew | 风险级别：yellow, v1.26.0 | generalized runtime or code generation signal |
| shellcheck | Homebrew | 风险级别：yellow, v0.11.0 | generalized runtime or code generation signal |
| perl | Homebrew | 风险级别：yellow, v5.42.2 | broad file, network, media, or database tool signal |
| meson | Homebrew | 风险级别：yellow, v1.11.2 | build system capable of executing project logic |
| gradle | Homebrew | 风险级别：yellow, v9.6.1 | build system capable of executing project logic |
| fish | Homebrew | 风险级别：yellow, v4.8.1 | generalized runtime or code generation signal |
| zsh | Homebrew | 风险级别：yellow, v5.9.2 | doc example: shell runtime |
| eza | Homebrew | 风险级别：yellow, v0.23.5 | generalized runtime or code generation signal |
| mongosh | Homebrew | 风险级别：yellow, v2.9.2 | broad file, network, media, or database tool signal |
| zoxide | Homebrew | 风险级别：yellow, v0.10.0 | generalized runtime or code generation signal |
| mesa | Homebrew | 风险级别：yellow, v26.1.4 | generalized runtime or code generation signal |
| orc | Homebrew | 风险级别：yellow, v0.4.42 | generalized runtime or code generation signal |
| go-task | Homebrew | 风险级别：yellow, v3.52.0 | generalized runtime or code generation signal |
| powershell | Homebrew | 风险级别：yellow, v7.6.4 | generalized runtime or code generation signal |
| doxygen | Homebrew | 风险级别：yellow, v1.17.0 | generalized runtime or code generation signal |
| zig | Homebrew | 风险级别：yellow, v0.16.0 | generalized runtime or code generation signal |
| httpie | Homebrew | 风险级别：yellow, v3.2.4 | generalized runtime or code generation signal |
| parallel | Homebrew | 风险级别：yellow, v20260722 | broad file, network, media, or database tool signal |
| erlang | Homebrew | 风险级别：yellow, v29.0.4 | generalized runtime or code generation signal |
| oh-my-posh | Homebrew | 风险级别：yellow, v30.4.0 | generalized runtime or code generation signal |
| shfmt | Homebrew | 风险级别：yellow, v3.13.1 | generalized runtime or code generation signal |
| mosh | Homebrew | 风险级别：yellow, v1.4.0 | broad file, network, media, or database tool signal |
| nushell | Homebrew | 风险级别：yellow, v0.114.1 | generalized runtime or code generation signal |
| crun | Homebrew | 风险级别：yellow, v1.28 | generalized runtime or code generation signal |
| mono | Homebrew | 风险级别：yellow, v6.14.1 | broad file, network, media, or database tool signal |
| sbt | Homebrew | 风险级别：yellow, v2.0.4 | generalized runtime or code generation signal |
| gauche | Homebrew | 风险级别：yellow, v0.9.15 | generalized runtime or code generation signal |
| nano | Homebrew | 风险级别：yellow, v9.2 | generalized runtime or code generation signal |
| kcov | Homebrew | 风险级别：yellow, v43 | generalized runtime or code generation signal |
| fswatch | Homebrew | 风险级别：yellow, v1.22.0 | generalized runtime or code generation signal |
| gum | Homebrew | 风险级别：yellow, v0.17.0 | generalized runtime or code generation signal |
| kotlin | Homebrew | 风险级别：yellow, v2.4.10 | generalized runtime or code generation signal |
| mit-scheme | Homebrew | 风险级别：yellow, v12.1 | generalized runtime or code generation signal |
| chicken | Homebrew | 风险级别：yellow, v5.4.0 | generalized runtime or code generation signal |
| percona-toolkit | Homebrew | 风险级别：yellow, v3.7.1-4 | broad file, network, media, or database tool signal |
| carapace | Homebrew | 风险级别：yellow, v1.7.3 | generalized runtime or code generation signal |
| mujs | Homebrew | 风险级别：yellow, v1.3.9 | generalized runtime or code generation signal |
| bazel | Homebrew | 风险级别：yellow, v9.2.0 | generalized runtime or code generation signal |
| ant | Homebrew | 风险级别：yellow, v1.10.17 | generalized runtime or code generation signal |
| swift | Homebrew | 风险级别：yellow, v6.3.3 | broad file, network, media, or database tool signal |
| dialog | Homebrew | 风险级别：yellow, v1.3-20260721 | generalized runtime or code generation signal |
| jo | Homebrew | 风险级别：yellow, v1.9 | generalized runtime or code generation signal |