Automic VaultAutomic Vault

security

Secret-risk packages

Packages with protected-tool coverage, approval-gate metadata, or non-low Geiger findings deserve explicit review before agents run them.

summary

Why this package group is here

Secret-risk packages currently includes 2484 package catalog entries. 0 have protected-tool coverage, 20 have approval-gate metadata, and 2129 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.

Generated source

This hub uses the same local package data as individual package pages: Nucleus package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.

Review model

Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.

High-signal tools

cmake6 approval-gate rules are present.go7 approval-gate rules are present.node7 approval-gate rules are present.gemini-cli5 approval-gate rules are present.jq3 approval-gate rules are present.mkcert4 approval-gate rules are present.pkgconf3 approval-gate rules are present.uv6 approval-gate rules are present.xcbeautify2 approval-gate rules are present.awscli8 approval-gate rules are present.coreutils8 approval-gate rules are present.docker6 approval-gate rules are present.

Approval-gated tools

cmake6 approval-gate rules are present.go7 approval-gate rules are present.node7 approval-gate rules are present.gemini-cli5 approval-gate rules are present.jq3 approval-gate rules are present.mkcert4 approval-gate rules are present.pkgconf3 approval-gate rules are present.uv6 approval-gate rules are present.

Related hubs

Homebrew utility packagesHomebrew packages with local package pages that need at least one crawlable package-graph path.2,484Terminal utility packagesCommand-line utilities with local package pages, executable metadata, and Automic Vault security notes.2,455Networking and protocol packagesNetwork clients, protocol utilities, download tools, and remote-service helpers.1,688Source-control packagesSource-control packages can read or mutate repositories, issue trackers, release flows, and authenticated developer state.1,052Text processing packagesPackages used to inspect, transform, search, render, or generate text and structured documents.928Web development packagesWeb servers, frontend build tools, JavaScript packages, CSS tools, and browser-adjacent utilities.806Developer build packagesBuild systems, compilers, generators, and developer tools that influence local source trees and artifacts.767Package ecosystem packagesPackages that install, publish, inspect, or automate other package ecosystems.711

Representative package spokes

a52decbroad file, network, media, or database tool signalaarch64-elf-gdbescape, surveillance, or offensive capability signalaclnarrow executable package without higher-risk signalsacl2generalized runtime or code generation signalacme.shbroad file, network, media, or database tool signalacpicanarrow executable package without higher-risk signalsactivemqbroad file, network, media, or database tool signaladios2broad file, network, media, or database tool signaladr-toolsbroad file, network, media, or database tool signaladr-viewerbroad file, network, media, or database tool signaladvancecompbroad file, network, media, or database tool signalaercbroad file, network, media, or database tool signalaescryptbroad file, network, media, or database tool signalaespipebroad file, network, media, or database tool signalafiobroad file, network, media, or database tool signalafsctoolbroad file, network, media, or database tool signal

packages

Indexed package pages

PackageManagerSignalsWhy it appears here
cmakeHomebrewapproval gate, yellow risk, v4.3.46 approval-gate rules are present.
goHomebrewapproval gate, yellow risk, v1.26.57 approval-gate rules are present.
nodeHomebrewapproval gate, yellow risk, v26.4.07 approval-gate rules are present.
gemini-cliHomebrewapproval gate, v0.46.05 approval-gate rules are present.
jqHomebrewapproval gate, green risk, v1.8.23 approval-gate rules are present.
mkcertHomebrewapproval gate, green risk, v1.4.44 approval-gate rules are present.
pkgconfHomebrewapproval gate, green risk, v2.5.13 approval-gate rules are present.
uvHomebrewapproval gate, v0.11.286 approval-gate rules are present.
xcbeautifyHomebrewapproval gate, green risk, v3.2.12 approval-gate rules are present.
awscliHomebrewapproval gate, v2.35.178 approval-gate rules are present.
coreutilsHomebrewapproval gate, blue risk, v9.118 approval-gate rules are present.
dockerHomebrewapproval gate, orange risk, v29.6.16 approval-gate rules are present.
ffmpegHomebrewapproval gate, blue risk, v8.1.24 approval-gate rules are present.
ghHomebrewapproval gate, blue risk, v2.96.07 approval-gate rules are present.
gitHomebrewapproval gate, blue risk, v2.55.06 approval-gate rules are present.
imagemagickHomebrewapproval gate, blue risk, v7.1.2-275 approval-gate rules are present.
miseHomebrewapproval gate, orange risk, v2026.7.26 approval-gate rules are present.
openssl@3Homebrewapproval gate, v3.6.35 approval-gate rules are present.
pyenvHomebrewapproval gate, orange risk, v2.7.35 approval-gate rules are present.
python@3.13Homebrewapproval gate, v3.13.146 approval-gate rules are present.
acl2Homebrewyellow risk, v8.7generalized runtime or code generation signal
agdaHomebrewyellow risk, v2.8.0-r3generalized runtime or code generation signal
aldaHomebrewyellow risk, v2.4.3generalized runtime or code generation signal
algol68gHomebrewyellow risk, v3.11.3generalized runtime or code generation signal
aliaeHomebrewyellow risk, v0.26.6generalized runtime or code generation signal
ammonite-replHomebrewyellow risk, v3.0.9generalized runtime or code generation signal
antHomebrewyellow risk, v1.10.17generalized runtime or code generation signal
apache-sparkHomebrewyellow risk, v4.1.2broad file, network, media, or database tool signal
arturoHomebrewyellow risk, v0.10.0generalized runtime or code generation signal
ats2-postiatsHomebrewyellow risk, v0.4.2generalized runtime or code generation signal
autojumpHomebrewyellow risk, v22.5.3generalized runtime or code generation signal
aws-shellHomebrewyellow risk, v0.2.2generalized runtime or code generation signal
ballerinaHomebrewyellow risk, v2201.13.4generalized runtime or code generation signal
bamHomebrewyellow risk, v0.5.1generalized runtime or code generation signal
barHomebrewyellow risk, v1.4generalized runtime or code generation signal
bas55Homebrewyellow risk, v2.0generalized runtime or code generation signal
bashHomebrewyellow risk, v5.3.15doc example: shell runtime
bazelHomebrewyellow risk, v9.1.1generalized runtime or code generation signal
beakerlibHomebrewyellow risk, v1.33.3generalized runtime or code generation signal
befunge93Homebrewyellow risk, v2.25generalized runtime or code generation signal
berkeley-dbHomebrewyellow risk, v18.1.40broad file, network, media, or database tool signal
bicHomebrewyellow risk, v1.0.0generalized runtime or code generation signal
boldHomebrewyellow risk, v0.2.0generalized runtime or code generation signal
boot-cljHomebrewyellow risk, v2.8.3generalized runtime or code generation signal
bpythonHomebrewyellow risk, v0.26generalized runtime or code generation signal
brainfuckHomebrewyellow risk, v2.7.3generalized runtime or code generation signal
brpcHomebrewyellow risk, v1.17.0broad file, network, media, or database tool signal
brushHomebrewyellow risk, v0.4.0generalized runtime or code generation signal
bsdmakeHomebrewyellow risk, v24generalized runtime or code generation signal
build2Homebrewyellow risk, v0.18.1generalized runtime or code generation signal
bunsterHomebrewyellow risk, v0.14.0generalized runtime or code generation signal
byobuHomebrewyellow risk, v7.14generalized runtime or code generation signal
cadenceHomebrewyellow risk, v1.10.4generalized runtime or code generation signal
cafeobjHomebrewyellow risk, v1.6.2generalized runtime or code generation signal
carapaceHomebrewyellow risk, v1.7.3generalized runtime or code generation signal
cargo-makeHomebrewyellow risk, v0.37.24generalized runtime or code generation signal
cbmbasicHomebrewyellow risk, v1.0generalized runtime or code generation signal
chaiscriptHomebrewyellow risk, v6.1.0generalized runtime or code generation signal
chapelHomebrewyellow risk, v2.9.0broad file, network, media, or database tool signal
checkbashismsHomebrewyellow risk, v2.26.10generalized runtime or code generation signal
chickenHomebrewyellow risk, v5.4.0generalized runtime or code generation signal
chuckHomebrewyellow risk, v1.5.5.8broad file, network, media, or database tool signal
clarinetHomebrewyellow risk, v3.21.1generalized runtime or code generation signal
clingHomebrewyellow risk, v1.3generalized runtime or code generation signal
clojureHomebrewyellow risk, v1.12.5.1654generalized runtime or code generation signal
compiledbHomebrewyellow risk, v0.10.7broad file, network, media, or database tool signal
conduitHomebrewyellow risk, v0.16.1broad file, network, media, or database tool signal
couchbase-shellHomebrewyellow risk, v1.3.0generalized runtime or code generation signal
cpiHomebrewyellow risk, v2.2.4generalized runtime or code generation signal
cpu_featuresHomebrewyellow risk, v0.11.0generalized runtime or code generation signal
crashHomebrewyellow risk, v1.3.2generalized runtime or code generation signal
create-dmgHomebrewyellow risk, v1.3.0generalized runtime or code generation signal