生成来源
此 hub 使用与单个软件包页面相同的本地数据：pkg.so 软件包元数据、Homebrew 增强数据、Geiger 分类器输出、密钥处理 manifest，以及可用的审批门种子。
security
Secret-risk packages
Packages with protected-tool coverage, approval-gate metadata, or non-low Geiger findings deserve explicit review before agents run them.
软件包摘要
为什么存在这个软件包组
Secret-risk packages 当前包含 2475 个生成的软件包页面。0 个有受保护工具覆盖，20 个有审批门元数据，2137 个有非低级 Geiger 分类结果。分组来自软件包元数据，因此可随数据变化保持更新。
审查模型
使用此 hub 查找在代理运行前需要更严格密钥注入、审批门或人工审查的命令族。
高信号工具
带审批门的工具
相关 hub
代表性软件包页面
openssl@3存在 5 条审批门规则。sqlitedoc example: bounded database toolxzbroad file, network, media, or database tool signalnode存在 7 条审批门规则。gh存在 7 条审批门规则。zstdbroad file, network, media, or database tool signalawscli存在 8 条审批门规则。lz4broad file, network, media, or database tool signalffmpeg存在 4 条审批门规则。uv存在 6 条审批门规则。pkgconf存在 3 条审批门规则。cmake存在 6 条审批门规则。libtifflibrary-like package without higher-risk signalsgo存在 7 条审批门规则。jpeg-turbobroad file, network, media, or database tool signalpython@3.13存在 6 条审批门规则。
软件包
已索引的软件包页面
| 软件包 | 管理器 | 信号 | 原因 |
|---|---|---|---|
| node | Homebrew | 审批门, 风险级别：yellow, v26.9.0 | 7 approval-gate rules are present. |
| cmake | Homebrew | 审批门, 风险级别：yellow, v4.4.3 | 6 approval-gate rules are present. |
| go | Homebrew | 审批门, 风险级别：yellow, v1.27.1 | 7 approval-gate rules are present. |
| uv | Homebrew | 审批门, v0.12.16 | 6 approval-gate rules are present. |
| pkgconf | Homebrew | 审批门, 风险级别：绿色, v3.0.7 | 3 approval-gate rules are present. |
| xcbeautify | Homebrew | 审批门, 风险级别：绿色, v3.2.1 | 2 approval-gate rules are present. |
| gemini-cli | Homebrew | 审批门, v0.46.0 | 5 approval-gate rules are present. |
| jq | Homebrew | 审批门, 风险级别：绿色, v1.8.2 | 3 approval-gate rules are present. |
| mkcert | Homebrew | 审批门, 风险级别：绿色, v1.4.4 | 4 approval-gate rules are present. |
| openssl@3 | Homebrew | 审批门, v3.6.4 | 5 approval-gate rules are present. |
| gh | Homebrew | 审批门, 风险级别：blue, v2.101.0 | 7 approval-gate rules are present. |
| awscli | Homebrew | 审批门, v2.36.48 | 8 approval-gate rules are present. |
| ffmpeg | Homebrew | 审批门, 风险级别：blue, v9.0.1 | 4 approval-gate rules are present. |
| python@3.13 | Homebrew | 审批门, v3.13.15 | 6 approval-gate rules are present. |
| git | Homebrew | 审批门, 风险级别：blue, v2.55.0 | 6 approval-gate rules are present. |
| coreutils | Homebrew | 审批门, 风险级别：blue, v9.12 | 8 approval-gate rules are present. |
| imagemagick | Homebrew | 审批门, 风险级别：blue, v7.1.2-31 | 5 approval-gate rules are present. |
| mise | Homebrew | 审批门, 风险级别：orange, v2026.9.11 | 6 approval-gate rules are present. |
| pyenv | Homebrew | 审批门, 风险级别：orange, v2.8.6 | 5 approval-gate rules are present. |
| docker | Homebrew | 审批门, 风险级别：orange, v29.8.1 | 6 approval-gate rules are present. |
| gcc | Homebrew | 风险级别：yellow, v16.2.0 | compiler and toolchain runtime |
| llvm | Homebrew | 风险级别：yellow, v23.1.1 | compiler and toolchain runtime |
| openjdk | Homebrew | 风险级别：yellow, v27 | Java runtime and development kit |
| ruby | Homebrew | 风险级别：yellow, v4.0.7 | doc example: interpreter runtime |
| deno | Homebrew | 风险级别：yellow, v2.9.7 | doc example: JavaScript runtime |
| util-linux | Homebrew | 风险级别：yellow, v2.42.3 | generalized runtime or code generation signal |
| ninja | Homebrew | 风险级别：yellow, v1.13.2 | build system capable of executing project logic |
| luajit | Homebrew | 风险级别：yellow, v2.1.1788856981 | generalized runtime or code generation signal |
| bash | Homebrew | 风险级别：yellow, v5.3.20 | doc example: shell runtime |
| maven | Homebrew | 风险级别：yellow, v3.9.16 | build system capable of executing project logic |
| ghostscript | Homebrew | 风险级别：yellow, v10.08.0 | generalized runtime or code generation signal |
| lua | Homebrew | 风险级别：yellow, v5.5.1 | doc example: interpreter runtime |
| starship | Homebrew | 风险级别：yellow, v1.26.0 | generalized runtime or code generation signal |
| shellcheck | Homebrew | 风险级别：yellow, v0.11.0 | generalized runtime or code generation signal |
| perl | Homebrew | 风险级别：yellow, v5.44.0 | broad file, network, media, or database tool signal |
| gradle | Homebrew | 风险级别：yellow, v9.7.1 | build system capable of executing project logic |
| meson | Homebrew | 风险级别：yellow, v1.12.0 | build system capable of executing project logic |
| zsh | Homebrew | 风险级别：yellow, v5.9.2 | doc example: shell runtime |
| fish | Homebrew | 风险级别：yellow, v4.9.3 | generalized runtime or code generation signal |
| zoxide | Homebrew | 风险级别：yellow, v0.10.0 | generalized runtime or code generation signal |
| eza | Homebrew | 风险级别：yellow, v0.23.5 | generalized runtime or code generation signal |
| mongosh | Homebrew | 风险级别：yellow, v2.11.1 | broad file, network, media, or database tool signal |
| powershell | Homebrew | 风险级别：yellow, v7.6.6 | generalized runtime or code generation signal |
| mesa | Homebrew | 风险级别：yellow, v26.2.3 | generalized runtime or code generation signal |
| orc | Homebrew | 风险级别：yellow, v0.4.44 | generalized runtime or code generation signal |
| go-task | Homebrew | 风险级别：yellow, v3.53.1 | generalized runtime or code generation signal |
| doxygen | Homebrew | 风险级别：yellow, v1.18.0 | generalized runtime or code generation signal |
| zig | Homebrew | 风险级别：yellow, v0.16.0 | generalized runtime or code generation signal |
| parallel | Homebrew | 风险级别：yellow, v20260822 | broad file, network, media, or database tool signal |
| shfmt | Homebrew | 风险级别：yellow, v3.14.1 | generalized runtime or code generation signal |
| httpie | Homebrew | 风险级别：yellow, v3.2.4 | generalized runtime or code generation signal |
| oh-my-posh | Homebrew | 风险级别：yellow, v31.3.0 | generalized runtime or code generation signal |
| erlang | Homebrew | 风险级别：yellow, v29.1 | generalized runtime or code generation signal |
| mosh | Homebrew | 风险级别：yellow, v1.4.0 | broad file, network, media, or database tool signal |
| nushell | Homebrew | 风险级别：yellow, v0.115.1 | generalized runtime or code generation signal |
| crun | Homebrew | 风险级别：yellow, v1.29.1 | generalized runtime or code generation signal |
| gauche | Homebrew | 风险级别：yellow, v0.9.15 | generalized runtime or code generation signal |
| sbt | Homebrew | 风险级别：yellow, v2.0.9 | generalized runtime or code generation signal |
| mono | Homebrew | 风险级别：yellow, v6.14.1 | broad file, network, media, or database tool signal |
| nano | Homebrew | 风险级别：yellow, v9.2 | generalized runtime or code generation signal |
| fswatch | Homebrew | 风险级别：yellow, v1.22.0 | generalized runtime or code generation signal |
| gum | Homebrew | 风险级别：yellow, v2.0.1 | generalized runtime or code generation signal |
| mit-scheme | Homebrew | 风险级别：yellow, v12.1 | generalized runtime or code generation signal |
| kcov | Homebrew | 风险级别：yellow, v43 | generalized runtime or code generation signal |
| chicken | Homebrew | 风险级别：yellow, v6.0.0 | generalized runtime or code generation signal |
| percona-toolkit | Homebrew | 风险级别：yellow, v3.7.1-4 | broad file, network, media, or database tool signal |
| kotlin | Homebrew | 风险级别：yellow, v2.4.20 | generalized runtime or code generation signal |
| carapace | Homebrew | 风险级别：yellow, v1.7.3 | generalized runtime or code generation signal |
| mujs | Homebrew | 风险级别：yellow, v1.3.10 | generalized runtime or code generation signal |
| swift | Homebrew | 风险级别：yellow, v6.3.3 | broad file, network, media, or database tool signal |
| ant | Homebrew | 风险级别：yellow, v1.10.18 | generalized runtime or code generation signal |
| bazel | Homebrew | 风险级别：yellow, v9.2.0 | generalized runtime or code generation signal |