grepai
Warn
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
grepaiutility from a third-party Homebrew tap (yoanbernabeu/tap/grepai). This source is external to the official platform and the skill author's known infrastructure, posing a supply chain risk if the repository is compromised. - [COMMAND_EXECUTION]: The instructions involve executing shell commands to install software, initialize indexing (
grepai init), and maintain a background daemon (grepai watch) for processing file content. - [DATA_EXPOSURE]: The tool is designed to perform semantic indexing and search across the entire local codebase. This process involves reading all files in the project directory to generate search embeddings, which may include sensitive configuration or data files within the repository context.
Audit Metadata