# Productivity CLI packages Productivity CLIs and desktop-adjacent tools that agents may use for notes, documents, mail, calendars, and workflow automation. - **Packages:** 933 - **Protected tools:** 12 - **Approval gates:** 1 - **Non-low risk:** 171 - **Updated:** 2026-06-10 ## Why this package group is here Productivity CLI packages currently includes 933 package catalog entries. 12 have protected-tool coverage, 1 have approval-gate metadata, and 171 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes. ## Generated source This hub uses the same local package data as individual package pages: Nucleus package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available. ## Review model Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them. ## Indexed package pages - [gh](https://www.automicvault.com/pkg/brew/gh/) - Trivially Accessible Secrets - [dropbox-uploader](https://www.automicvault.com/pkg/brew/dropbox-uploader/) - Plain Text Dropbox OAuth Token - [ansible](https://www.automicvault.com/pkg/brew/ansible/) - Plain Text Ansible Galaxy Token - [fastlane](https://www.automicvault.com/pkg/brew/fastlane/) - Plain Text fastlane Spaceship Sessions - [qwen-code](https://www.automicvault.com/pkg/brew/qwen-code/) - Plain Text Qwen Code API Keys - [midnight-commander](https://www.automicvault.com/pkg/brew/midnight-commander/) - Plain Text Midnight Commander VFS Credentials - [wakatime-cli](https://www.automicvault.com/pkg/brew/wakatime-cli/) - Plain Text WakaTime API Keys - [todoist-cli](https://www.automicvault.com/pkg/brew/todoist-cli/) - Plain Text Todoist API Token - [grafanactl](https://www.automicvault.com/pkg/brew/grafanactl/) - Plain Text Grafana Credentials - [pulumi](https://www.automicvault.com/pkg/brew/pulumi/) - Plain Text Pulumi Access Tokens - [imap-backup](https://www.automicvault.com/pkg/brew/imap-backup/) - Plain Text IMAP Account Passwords - [gotify](https://www.automicvault.com/pkg/brew/gotify/) - Plain Text Gotify Application Token - [gradle](https://www.automicvault.com/pkg/brew/gradle/) - build system capable of executing project logic - [go-task](https://www.automicvault.com/pkg/brew/go-task/) - generalized runtime or code generation signal - [doxygen](https://www.automicvault.com/pkg/brew/doxygen/) - generalized runtime or code generation signal - [parallel](https://www.automicvault.com/pkg/brew/parallel/) - broad file, network, media, or database tool signal - [powershell](https://www.automicvault.com/pkg/brew/powershell/) - generalized runtime or code generation signal - [groovysdk](https://www.automicvault.com/pkg/brew/groovysdk/) - generalized runtime or code generation signal - [autojump](https://www.automicvault.com/pkg/brew/autojump/) - generalized runtime or code generation signal - [byobu](https://www.automicvault.com/pkg/brew/byobu/) - generalized runtime or code generation signal - [jiratui](https://www.automicvault.com/pkg/brew/jiratui/) - generalized runtime or code generation signal - [docker-agent](https://www.automicvault.com/pkg/brew/docker-agent/) - generalized runtime or code generation signal - [translate-shell](https://www.automicvault.com/pkg/brew/translate-shell/) - generalized runtime or code generation signal - [rofi](https://www.automicvault.com/pkg/brew/rofi/) - generalized runtime or code generation signal - [intelli-shell](https://www.automicvault.com/pkg/brew/intelli-shell/) - generalized runtime or code generation signal - [murex](https://www.automicvault.com/pkg/brew/murex/) - generalized runtime or code generation signal - [tasksh](https://www.automicvault.com/pkg/brew/tasksh/) - generalized runtime or code generation signal - [fb-client](https://www.automicvault.com/pkg/brew/fb-client/) - broad file, network, media, or database tool signal - [pyp](https://www.automicvault.com/pkg/brew/pyp/) - generalized runtime or code generation signal - [doitlive](https://www.automicvault.com/pkg/brew/doitlive/) - generalized runtime or code generation signal - [boot-clj](https://www.automicvault.com/pkg/brew/boot-clj/) - generalized runtime or code generation signal - [cargo-make](https://www.automicvault.com/pkg/brew/cargo-make/) - generalized runtime or code generation signal - [exim](https://www.automicvault.com/pkg/brew/exim/) - generalized runtime or code generation signal - [recur](https://www.automicvault.com/pkg/brew/recur/) - generalized runtime or code generation signal - [sbuild](https://www.automicvault.com/pkg/brew/sbuild/) - generalized runtime or code generation signal - [shell2http](https://www.automicvault.com/pkg/brew/shell2http/) - broad file, network, media, or database tool signal - [nmh](https://www.automicvault.com/pkg/brew/nmh/) - generalized runtime or code generation signal - [mdsh](https://www.automicvault.com/pkg/brew/mdsh/) - generalized runtime or code generation signal - [empty](https://www.automicvault.com/pkg/brew/empty/) - generalized runtime or code generation signal - [omake](https://www.automicvault.com/pkg/brew/omake/) - generalized runtime or code generation signal - [desk](https://www.automicvault.com/pkg/brew/desk/) - generalized runtime or code generation signal - [ngs](https://www.automicvault.com/pkg/brew/ngs/) - generalized runtime or code generation signal - [xe](https://www.automicvault.com/pkg/brew/xe/) - generalized runtime or code generation signal - [sexpect](https://www.automicvault.com/pkg/brew/sexpect/) - generalized runtime or code generation signal - [ppss](https://www.automicvault.com/pkg/brew/ppss/) - generalized runtime or code generation signal - [gnupg](https://www.automicvault.com/pkg/brew/gnupg/) - no executable entrypoint in the package index - [yq](https://www.automicvault.com/pkg/brew/yq/) - narrow executable package without higher-risk signals - [tmux](https://www.automicvault.com/pkg/brew/tmux/) - no executable entrypoint in the package index - [pandoc](https://www.automicvault.com/pkg/brew/pandoc/) - narrow executable package without higher-risk signals - [watchman](https://www.automicvault.com/pkg/brew/watchman/) - no executable entrypoint in the package index - [just](https://www.automicvault.com/pkg/brew/just/) - no executable entrypoint in the package index - [vim](https://www.automicvault.com/pkg/brew/vim/) - no executable entrypoint in the package index - [hugo](https://www.automicvault.com/pkg/brew/hugo/) - narrow executable package without higher-risk signals - [actionlint](https://www.automicvault.com/pkg/brew/actionlint/) - no executable entrypoint in the package index - [sphinx-doc](https://www.automicvault.com/pkg/brew/sphinx-doc/) - no executable entrypoint in the package index - [sourcekitten](https://www.automicvault.com/pkg/brew/sourcekitten/) - narrow executable package without higher-risk signals - [md4c](https://www.automicvault.com/pkg/brew/md4c/) - narrow executable package without higher-risk signals - [jbig2dec](https://www.automicvault.com/pkg/brew/jbig2dec/) - library-like package without higher-risk signals - [terraform-docs](https://www.automicvault.com/pkg/brew/terraform-docs/) - no executable entrypoint in the package index - [television](https://www.automicvault.com/pkg/brew/television/) - no executable entrypoint in the package index - [cliclick](https://www.automicvault.com/pkg/brew/cliclick/) - narrow executable package without higher-risk signals - [zellij](https://www.automicvault.com/pkg/brew/zellij/) - no executable entrypoint in the package index - [ocrmypdf](https://www.automicvault.com/pkg/brew/ocrmypdf/) - narrow executable package without higher-risk signals - [docutils](https://www.automicvault.com/pkg/brew/docutils/) - narrow executable package without higher-risk signals - [glow](https://www.automicvault.com/pkg/brew/glow/) - narrow executable package without higher-risk signals - [docbook-xsl](https://www.automicvault.com/pkg/brew/docbook-xsl/) - narrow executable package without higher-risk signals - [overmind](https://www.automicvault.com/pkg/brew/overmind/) - narrow executable package without higher-risk signals - [plantuml](https://www.automicvault.com/pkg/brew/plantuml/) - no executable entrypoint in the package index - [texinfo](https://www.automicvault.com/pkg/brew/texinfo/) - narrow executable package without higher-risk signals - [tealdeer](https://www.automicvault.com/pkg/brew/tealdeer/) - narrow executable package without higher-risk signals - [lefthook](https://www.automicvault.com/pkg/brew/lefthook/) - no executable entrypoint in the package index - [prettier](https://www.automicvault.com/pkg/brew/prettier/) - narrow executable package without higher-risk signals