alexverify

Eyebrow — AI skill for Claude Code

AI community

Trust and verification for the skills your AI agent installs.

How to install Eyebrow

This entry records only its repository, not the path inside it, so there is no exact command to give. Open alexverify/eyebrow and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Eyebrow does

Trust and verification for the skills your AI agent installs.

Alternatives in AI

  • Pilotfish — Multi-model orchestration layer for Claude Code — the frontier model plans, cheaper models execute, verificati 688 ★
  • Coralline — 🪸 Powerlevel10k-inspired statusline for Claude Code — paste one prompt and your AI interviews you, then insta 541 ★
  • Engage.Scorecard — Calibrate model verdict trust (Wilson-bounded miss-rate) to short-circuit re-validation 348 ★

README

eyebrow

eyebrow

[![ci](https://github.com/alexverify/eyebrow/actions/workflows/ci.yml/badge.svg)](https://github.com/alexverify/eyebrow/actions/workflows/ci.yml)

Website — eyebrow.cc  Follow @eyebrowCC on X

**Supply-chain integrity for AI coding tools.** A single static binary that discovers every skill, MCP server, plugin, hook, and rule installed across your AI coding tools, hashes them into a lockfile, statically scans them, and detects post-audit modification — "rug pulls" — before they bite.

Status: Component 1 (the read-only `scan`/`verify` wedge) and Component 2 (the runtime MCP firewall — `wrap`, sandbox, egress proxy) are implemented. Component 3 ships a local, embedded dashboard with usage telemetry, fleet blast-radius, policy conformance, and an opt-in reputation signal; the hosted team API is designed but not yet built. See [docs/architecture/ARCHITECTURE.md](docs/architecture/ARCHITECTURE.md).

![eyebrow dashboard — inventory, findings, and drift at a glance](docs/assets/dashboard.png)

Why

Skills, MCP servers, and hooks run with your privileges and can change after you audit them. eyebrow gives you a committable lockfile (`eyebrowlock.json`) of exactly what's installed and what it does, and tells you the moment any of it changes.

Install

**Homebrew** (macOS / Linux):

brew install alexverify/tap/eyebrow

**From source** — the strongest trust path; needs only Go 1.25+:

go install github.com/alexverify/eyebrow/cmd/eyebrow@latest
# or
git clone https://github.com/alexverify/eyebrow && cd eyebrow && m