Skills
Navigate
skills/data-wise/craft/homebrew-formula-expert/Gen Agent Trust Hub

homebrew-formula-expert

Fail

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides templates for Homebrew formulas that utilize post_install hooks to execute generated shell scripts (my-plugin-install). These scripts perform file system operations, environment detection, and configuration updates.
  • [COMMAND_EXECUTION]: The provided templates for Claude Code plugins include instructions to modify external application configuration files (/.claude/settings.json) and manage symlinks in the user's home directory (/.claude/plugins/).
  • [COMMAND_EXECUTION]: The templates utilize system-level introspection tools such as lsof and pgrep to monitor running processes on the host machine to determine if configuration files are locked.
  • [EXTERNAL_DOWNLOADS]: The skill documents standard methods for fetching source archives from remote repositories including GitHub, npm, and PyPI. It includes instructions for verifying download integrity using curl and shasum.
Recommendations
  • HIGH: Downloads and executes remote code from: https://github.com/user/repo/archive/v1.0.0.tar.gz - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Jun 23, 2026, 08:17 PM
Security Audit — agent-trust-hub — homebrew-formula-expert