homebrew-setup
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the official Homebrew installation script from Homebrew's verified GitHub repository (
raw.githubusercontent.com/Homebrew/install/HEAD/install.sh). This is the standard, documented method for installing Homebrew on macOS. - [REMOTE_CODE_EXECUTION]: The skill executes the downloaded installation script using
bash -c. While this pattern is often flagged, in this context it is the official and intended installation mechanism for a well-known service (Homebrew). The skill includes safety rails instructing the agent to let the user review the script's output and admin password prompts. - [COMMAND_EXECUTION]: The skill performs routine system operations including environment variable configuration in
~/.zprofileand architecture checks usinguname -mandbrew --prefix. It uses a 'grep-guard' to ensure that PATH modifications are idempotent and do not create duplicate entries. - [DATA_EXPOSURE_AND_EXFILTRATION]: No sensitive data access or exfiltration patterns were detected. The skill specifically recommends turning off Homebrew analytics as a user choice.
Audit Metadata