生成来源
此 hub 使用与单个软件包页面相同的本地数据：pkg.so 软件包元数据、Homebrew 增强数据、Geiger 分类器输出、密钥处理 manifest，以及可用的审批门种子。
security
Secret-risk packages
Packages with protected-tool coverage, approval-gate metadata, or non-low Geiger findings deserve explicit review before agents run them.
软件包摘要
为什么存在这个软件包组
Secret-risk packages 当前包含 2476 个生成的软件包页面。0 个有受保护工具覆盖，20 个有审批门元数据，2137 个有非低级 Geiger 分类结果。分组来自软件包元数据，因此可随数据变化保持更新。
审查模型
使用此 hub 查找在代理运行前需要更严格密钥注入、审批门或人工审查的命令族。
高信号工具
带审批门的工具
相关 hub
代表性软件包页面
openssl@3存在 5 条审批门规则。sqlitedoc example: bounded database toolxzbroad file, network, media, or database tool signalnode存在 7 条审批门规则。gh存在 7 条审批门规则。zstdbroad file, network, media, or database tool signalawscli存在 8 条审批门规则。lz4broad file, network, media, or database tool signaluv存在 6 条审批门规则。ffmpeg存在 4 条审批门规则。pkgconf存在 3 条审批门规则。cmake存在 6 条审批门规则。go存在 7 条审批门规则。jpeg-turbobroad file, network, media, or database tool signalbrotlibroad file, network, media, or database tool signallibtifflibrary-like package without higher-risk signals
软件包
已索引的软件包页面
| 软件包 | 管理器 | 信号 | 原因 |
|---|---|---|---|
| node | Homebrew | 审批门, 风险级别：yellow, v26.13.0 | 7 approval-gate rules are present. |
| cmake | Homebrew | 审批门, 风险级别：yellow, v4.4.5 | 6 approval-gate rules are present. |
| go | Homebrew | 审批门, 风险级别：yellow, v1.27.3 | 7 approval-gate rules are present. |
| uv | Homebrew | 审批门, v0.13.6 | 6 approval-gate rules are present. |
| pkgconf | Homebrew | 审批门, 风险级别：绿色, v3.0.10 | 3 approval-gate rules are present. |
| jq | Homebrew | 审批门, 风险级别：绿色, v1.8.2 | 3 approval-gate rules are present. |
| xcbeautify | Homebrew | 审批门, 风险级别：绿色, v3.2.1 | 2 approval-gate rules are present. |
| gemini-cli | Homebrew | 审批门, v0.66.0 | 5 approval-gate rules are present. |
| mkcert | Homebrew | 审批门, 风险级别：绿色, v1.4.4 | 4 approval-gate rules are present. |
| openssl@3 | Homebrew | 审批门, v3.5.9 | 5 approval-gate rules are present. |
| gh | Homebrew | 审批门, 风险级别：blue, v2.103.3 | 7 approval-gate rules are present. |
| awscli | Homebrew | 审批门, v2.39.3 | 8 approval-gate rules are present. |
| ffmpeg | Homebrew | 审批门, 风险级别：blue, v9.0.2 | 4 approval-gate rules are present. |
| git | Homebrew | 审批门, 风险级别：blue, v2.56.0 | 6 approval-gate rules are present. |
| python@3.13 | Homebrew | 审批门, v3.13.18 | 6 approval-gate rules are present. |
| coreutils | Homebrew | 审批门, 风险级别：blue, v9.12 | 8 approval-gate rules are present. |
| imagemagick | Homebrew | 审批门, 风险级别：blue, v7.1.2-35 | 5 approval-gate rules are present. |
| mise | Homebrew | 审批门, 风险级别：orange, v2026.10.25 | 6 approval-gate rules are present. |
| docker | Homebrew | 审批门, 风险级别：orange, v29.9.2 | 6 approval-gate rules are present. |
| pyenv | Homebrew | 审批门, 风险级别：orange, v2.8.14 | 5 approval-gate rules are present. |
| gcc | Homebrew | 风险级别：yellow, v16.2.0 | compiler and toolchain runtime |
| llvm | Homebrew | 风险级别：yellow, v23.1.4 | compiler and toolchain runtime |
| openjdk | Homebrew | 风险级别：yellow, v27.0.1.0.3 | Java runtime and development kit |
| ruby | Homebrew | 风险级别：yellow, v4.0.9 | doc example: interpreter runtime |
| deno | Homebrew | 风险级别：yellow, v2.9.8 | doc example: JavaScript runtime |
| util-linux | Homebrew | 风险级别：yellow, v2.42.4 | generalized runtime or code generation signal |
| ninja | Homebrew | 风险级别：yellow, v1.13.2 | build system capable of executing project logic |
| luajit | Homebrew | 风险级别：yellow, v2.1.1793383622 | generalized runtime or code generation signal |
| bash | Homebrew | 风险级别：yellow, v5.3.20 | doc example: shell runtime |
| maven | Homebrew | 风险级别：yellow, v3.10.0 | build system capable of executing project logic |
| shellcheck | Homebrew | 风险级别：yellow, v0.11.0 | generalized runtime or code generation signal |
| starship | Homebrew | 风险级别：yellow, v1.27.0 | generalized runtime or code generation signal |
| lua | Homebrew | 风险级别：yellow, v5.5.1 | doc example: interpreter runtime |
| ghostscript | Homebrew | 风险级别：yellow, v10.08.0 | generalized runtime or code generation signal |
| perl | Homebrew | 风险级别：yellow, v5.44.0 | broad file, network, media, or database tool signal |
| meson | Homebrew | 风险级别：yellow, v1.12.1 | build system capable of executing project logic |
| zsh | Homebrew | 风险级别：yellow, v5.9.2 | doc example: shell runtime |
| gradle | Homebrew | 风险级别：yellow, v9.8.2 | build system capable of executing project logic |
| zoxide | Homebrew | 风险级别：yellow, v0.10.0 | generalized runtime or code generation signal |
| fish | Homebrew | 风险级别：yellow, v4.9.3 | generalized runtime or code generation signal |
| powershell | Homebrew | 风险级别：yellow, v7.6.9 | generalized runtime or code generation signal |
| eza | Homebrew | 风险级别：yellow, v0.23.5 | generalized runtime or code generation signal |
| mongosh | Homebrew | 风险级别：yellow, v2.14.1 | broad file, network, media, or database tool signal |
| orc | Homebrew | 风险级别：yellow, v0.4.44 | generalized runtime or code generation signal |
| mesa | Homebrew | 风险级别：yellow, v26.2.6 | generalized runtime or code generation signal |
| go-task | Homebrew | 风险级别：yellow, v3.54.0 | generalized runtime or code generation signal |
| doxygen | Homebrew | 风险级别：yellow, v1.18.0 | generalized runtime or code generation signal |
| shfmt | Homebrew | 风险级别：yellow, v3.14.1 | generalized runtime or code generation signal |
| zig | Homebrew | 风险级别：yellow, v0.17.0 | generalized runtime or code generation signal |
| httpie | Homebrew | 风险级别：yellow, v3.2.4 | generalized runtime or code generation signal |
| parallel | Homebrew | 风险级别：yellow, v20261022 | broad file, network, media, or database tool signal |
| mosh | Homebrew | 风险级别：yellow, v1.4.0 | broad file, network, media, or database tool signal |
| erlang | Homebrew | 风险级别：yellow, v29.1.2 | generalized runtime or code generation signal |
| oh-my-posh | Homebrew | 风险级别：yellow, v31.9.1 | generalized runtime or code generation signal |
| nushell | Homebrew | 风险级别：yellow, v0.116.1 | generalized runtime or code generation signal |
| gauche | Homebrew | 风险级别：yellow, v0.9.15 | generalized runtime or code generation signal |
| crun | Homebrew | 风险级别：yellow, v1.30.1 | generalized runtime or code generation signal |
| sbt | Homebrew | 风险级别：yellow, v2.0.12 | generalized runtime or code generation signal |
| nano | Homebrew | 风险级别：yellow, v9.3 | generalized runtime or code generation signal |
| mono | Homebrew | 风险级别：yellow, v6.14.1 | broad file, network, media, or database tool signal |
| fswatch | Homebrew | 风险级别：yellow, v1.22.0 | generalized runtime or code generation signal |
| gum | Homebrew | 风险级别：yellow, v2.0.2 | generalized runtime or code generation signal |
| mujs | Homebrew | 风险级别：yellow, v1.3.11 | generalized runtime or code generation signal |
| mit-scheme | Homebrew | 风险级别：yellow, v12.1 | generalized runtime or code generation signal |
| carapace | Homebrew | 风险级别：yellow, v1.8.2 | generalized runtime or code generation signal |
| kcov | Homebrew | 风险级别：yellow, v43 | generalized runtime or code generation signal |
| kotlin | Homebrew | 风险级别：yellow, v2.4.21 | generalized runtime or code generation signal |
| chicken | Homebrew | 风险级别：yellow, v6.0.0 | generalized runtime or code generation signal |
| swift | Homebrew | 风险级别：yellow, v6.4.2 | broad file, network, media, or database tool signal |
| percona-toolkit | Homebrew | 风险级别：yellow, v3.7.1-4 | broad file, network, media, or database tool signal |
| ant | Homebrew | 风险级别：yellow, v1.10.18 | generalized runtime or code generation signal |
| dartaotruntime | Homebrew | 风险级别：yellow, v3.13.7 | generalized runtime or code generation signal |