Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/data-wise/craft/homebrew-workflow-expertnpx skills add Data-Wise/craft --skill homebrew-workflow-expertgit clone --depth 1 https://github.com/Data-Wise/craftWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/data-wise/craft/homebrew-workflow-expert)<a href="https://agentmods.dev/skills/data-wise/craft/homebrew-workflow-expert"><img src="https://agentmods.dev/badge/skills/data-wise/craft/homebrew-workflow-expert.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00054 | $0.03131 |
| Opus 5 | $0.00027 | $0.01566 |
| Sonnet 5 | $0.00011 | $0.00626 |
| Haiku 4.5 | $0.00005 | $0.00313 |
Grade A, and why
homebrew-workflow-expert scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
SHA256=$(curl -sL "$TARBALL_URL" | shasum -a 256 | cut -d' ' -f1) How it starts
The opening of the file, as written. The whole thing — 465 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Homebrew Workflow Expert
Deep expertise in GitHub Actions workflows for automating Homebrew formula updates, releases, and tap management.
Surface scope: Homebrew installs plugins to the Claude Code CLI surface (
~/.claude/). Claude Desktop (DXT/MCPB extensions — a different, MCP-server format) and Cowork are separate surfaces; seedist-extrasandcommands/dist/surfaces.mdfor the full model.
Reusable Workflow Pattern
The recommended approach is a centralized reusable workflow in your homebrew-tap repository.
Tap Repository Structure
homebrew-tap/
├── .github/
│ └── workflows/
│ └── update-formula.yml # Reusable workflow
├── Formula/
│ ├── myapp.rb
│ └── othertool.rb
└── README.md
Reusable Workflow (update-formula.yml)
name: Update Formula
on:
workflow_call:
inputs:
formula_name:
required: true
type: string
description: 'Name of the formula to update (e.g., myapp)'
version:
required: true
type: string
description: 'New version (e.g., 1.2.3)'
sha256:
required: true
type: string
description: 'SHA256 hash of the release tarball'
source_type:
required: false
type: string
default: 'github'
description: 'Source type: github or pypi'
source_repo:
required: false
type: string
description: 'Source repository (default: github.repository)'
auto_merge:
required: false
type: boolean
default: false
description: 'Auto-merge the PR after creation'
secrets:
tap_token:
required: true
description: 'PAT with access to tap repository'
jobs:
update:
runs-on: ubuntu-latest
steps:
- name: Checkout tap repository
uses: actions/checkout@v4
with:
repository: YOUR-ORG/homebrew-tap
token: ${{ secrets.tap_token }}
- name: Update formula
run: |
FORMULA_FILE="Formula/${{ inputs.formula_name }}.rb"
if [ ! -f "$FORMULA_FILE" ]; then
echo "Error: Formula $FORMULA_FILE not found"
exit 1
fi
# Update version in URL
if [ "${{ inputs.source_type }}" = "pypi" ]; then
# PyPI URL pattern
sed -i "s|url \"https://files.pythonhosted.org/packages/.*/.*-[0-9.]*\.tar\.gz\"|url \"https://files.pythonhosted.org/packages/source/${FIRST_CHAR}/${{ inputs.formula_name }}/${{ inputs.formula_name }}-${{ inputs.version }}.tar.gz\"|" "$FORMULA_FILE"
else
# GitHub URL pattern
SOURCE_REPO="${{ inputs.source_repo || github.repository }}"
sed -i "s|url \"https://github.com/.*/archive/refs/tags/v[0-9.]*\.tar\.gz\"|url \"https://github.com/${SOURCE_REPO}/archive/refs/tags/v${{ inputs.version }}.tar.gz\"|" "$FORMULA_FILE"
fi
# Update SHA256
sed -i "s|sha256 \"[a-f0-9]*\"|sha256 \"${{ inputs.sha256 }}\"|" "$FORMULA_FILE"
echo "Updated $FORMULA_FILE to version ${{ inputs.version }}"
cat "$FORMULA_FILE"
- name: Create Pull Request
id: create-pr
uses: peter-evans/create-pull-request@v5
with:
token: ${{ secrets.tap_token }}
commit-message: "Update ${{ inputs.formula_name }} to ${{ inputs.version }}"
title: "Update ${{ inputs.formula_name }} to ${{ inputs.version }}"
body: |
Automated formula update from release workflow.
**Changes:**
- Version: ${{ inputs.version }}
- SHA256: ${{ inputs.sha256 }}
- Source: ${{ inputs.source_type }}
branch: update-${{ inputs.formula_name }}-${{ inputs.version }}
base: main
delete-branch: true
- name: Auto-merge PR
if: inputs.auto_merge && steps.create-pr.outputs.pull-request-number
env:
GH_TOKEN: ${{ secrets.tap_token }}
run: |
gh pr merge ${{ steps.create-pr.outputs.pull-request-number }} \
--repo YOUR-ORG/homebrew-tap \
--merge \
--delete-branch
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 465 lines · 54 tokens per session scan A cab21b88f035
homebrew-workflow-expert is a skill published in the GitHub repository Data-Wise/craft (4 stars, last pushed yesterday), licensed MIT. It adds 54 tokens to every session and 3,131 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
platform-operations
Unified platform operations guidance for CI/CD pipeline design, deployment strategies, observability, SLI/SLOs, and incident-ready rollouts. Use when building release workflows, production monitoring, or reliability controls.
mandu-mcp-deploy
빌드/배포 파이프라인 워크플로우. "배포", "deploy", release 전 자동 호출. deploy.check 는 fail-fast 게이트. deploy.preview 로 프로덕션 리허설. manual build + guard + seo 나열 대신 aggregate 도구 사용.
mandu-deploy
프로덕션 배포 파이프라인. Docker/CI-CD/nginx.
github-actions-workflow
Scaffolds or audits a GitHub Actions CI/CD workflow for a project. Covers job structure, caching, secrets handling, concurrency groups, environment gates, and reusable workflows via workflowcall. Invoked when the user asks to set up CI, add a GitHub Actions workflow, improve pipeline performance, or share workflow…
watch-patterns
Correct construction of watchers for long-running operations. TRIGGER when: arming observation of a long-running operation (CI run, deploy, transfer, GC/prune, log stream), writing poll/until loops, or using the Monitor tool. SKIP: defining production alerts/metrics (use monitoring-observability); log formatting (use…
tfx-ship
Skill "tfx-ship" from tellang/triflux, covering tfx-ship — triflux 릴리즈 자동화, 배포 채널 (3개 현행 + 1개 future), 전제 조건, 기본 경로 — ci 릴리즈 (권장) and 권장 실행 — release.yml 디스패치.