Install
$ agentstack add skill-malob-nix-config-new-cask ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Creating a New Homebrew Cask
You are orchestrating the creation of a new Homebrew cask. This skill coordinates multiple specialist agents and scripts to complete the workflow.
IMPORTANT: This skill runs in the main conversation context. You will use the Task tool to spawn agents for specialized work.
Input
URL provided: $ARGUMENTS
If no URL was provided, ask the user for:
- The app name, OR
- A download URL (direct link to DMG/ZIP), OR
- The product homepage (you'll find the download link)
Workflow Overview
1. Pre-flight checks → Agent: pre-flight-checker
2. Download & inspect → Agent: app-inspector
3. Livecheck strategy → Agent: livecheck-advisor
4. Write cask file → Agent: cask-writer
5. Testing → Automated tests, install, createzap, uninstall
6. Submit PR → Agent: pr-submitter
Create a task list to track progress through these steps.
Step-by-Step Execution
Step 1: Pre-flight Checks
Before investing time, verify the app is suitable:
Use the Task tool:
- subagent_type: homebrew:pre-flight-checker
- prompt: Check if this app is suitable for homebrew-cask submission.
The agent will derive any missing info (app name from URL, homepage via search, etc.) and include it in the output.
Capture from output: App name, homepage, download URL, description - you'll need these for later steps.
Decision point: If the agent returns REJECT, stop and explain why to the user. If CAUTION, inform the user and ask if they want to proceed.
Step 2: Download and Inspect
Download and inspect the app in one step:
Use the Task tool:
- subagent_type: homebrew:app-inspector
- prompt: Download and inspect the app.
Download URL:
Homepage:
The agent will download the file, compute the SHA256, extract all metadata, and run Homebrew's generate_cask_token tool to get the canonical token.
Capture from output: Suggested token, SHA256, version, bundle ID, app name, min macOS, auto-update info (framework, appcast URL if found), architecture.
Use the suggested token from app-inspector for subsequent steps. This token comes from Homebrew's tooling and handles naming conventions and collision detection.
Note on versioned URLs: If the download URL is unversioned (e.g., App.dmg), the livecheck-advisor may find a versioned URL in an appcast, release feed, or other source. If so, you'll need to re-download using the versioned URL to get the correct SHA256.
Step 3: Livecheck Strategy
Determine how to check for updates:
Use the Task tool:
- subagent_type: homebrew:livecheck-advisor
- prompt: Recommend a livecheck strategy for .
Download URL:
Homepage:
Update URL:
Current version:
Get the recommended livecheck block.
Step 4: Write the Cask
Synthesize everything into a cask file:
Use the Task tool:
- subagent_type: homebrew:cask-writer
- prompt: Write a cask for with this metadata:
Token:
Version:
URL:
SHA256: (or :no_check if unversioned URL)
(If separate binaries per architecture, provide URL and SHA256 for each)
Name:
Description:
Homepage:
Bundle ID:
App bundle: .app
Min macOS:
Auto-updates:
Livecheck:
Architecture:
Note: The zap stanza is added later after running createzap during testing.
Step 5: Testing
Automated Tests
Run the validation script:
${CLAUDE_PLUGIN_ROOT}/scripts/test-cask.sh ""
If tests fail, review the output, fix the cask (often brew style --fix handles style issues), and re-run.
For unversioned URLs: Use --skip-livecheck flag.
Install and Validate
- Install:
``bash HOMEBREW_NO_INSTALL_FROM_API=1 brew install --cask ``
- Launch:
``bash open -a "" ``
- User verification: Ask the user to sign in or set up the app if needed, then confirm when done.
Zap Discovery
- Run createzap (try both app name and bundle ID):
``bash brew tap nrlquaker/createzap 2>/dev/null || true brew createzap "" brew createzap "" ``
- Update the cask - Add the discovered zap paths using the Edit tool. For simple additions you can edit directly; for significant changes, re-invoke the cask-writer agent.
- Uninstall:
``bash brew uninstall --cask ``
- Re-run automated tests if zap stanza was added.
Step 6: Submit PR
When ready to submit:
Use the Task tool:
- subagent_type: homebrew:pr-submitter
- prompt: Submit a PR for the cask.
Version:
Cask path:
All tests passed: yes
Error Recovery
If any step fails:
- The task list shows which steps completed
- You can resume from the failed step
- Agent outputs are preserved in conversation history
Reference Documentation
For detailed guidance, agents can read these docs (at /opt/homebrew/docs/):
Acceptable-Casks.md- What's allowedCask-Cookbook.md- Stanza referenceBrew-Livecheck.md- Livecheck strategiesAdding-Software-to-Homebrew.md- Contribution process
Scripts Location
Scripts are at ${CLAUDE_PLUGIN_ROOT}/scripts/:
download-checksum.sh [filename]- Download and SHA256test-cask.sh [--skip-livecheck]- Run audit/style/livecheck
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: malob
- Source: malob/nix-config
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.