homebrew-formula-authoring
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for using official Homebrew commands like
brew create,brew install, andbrew auditto manage software packages. These are standard developer tools and their use is consistent with the skill's stated purpose. - [COMMAND_EXECUTION]: The skill directs the agent to execute shell commands for building and testing software. These operations are performed within the Homebrew ecosystem, which includes its own security considerations and build sandboxing. The use of local tap overrides for testing is a documented best practice for formula development.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external upstream URLs and formula code provided by the user. While this represents a theoretical attack surface for indirect prompt injection, the instructions emphasize using Homebrew's established safety protocols and validation steps (such as
brew audit --new) to mitigate risks associated with untrusted source code.
Audit Metadata