@eyebrowCC

eyebrow is an open-source CLI tool providing security auditing for AI coding agent skills, MCP servers, and plugins.

It addresses real supply-chain vulnerabilities in the AI agent ecosystem by inventorying, locking, and gating extensions with content hashes and tamper detection.

The project has a working product (v0.4.2 released), active GitHub presence, and has secured integrations with AgentOS and Aeon framework.

The $BROW token (deployed on Ethereum at 0x2142d4816e259fd7c119f61c772e39ae0cdaafde) will be used for a verification badge staking mechanism.

Green flags: Solving a genuine pain point: AI agent supply-chain security with documented threat landscape (140k+ vulnerabilities, malware incidents cited) · Working open-source product with versioned releases (v0.4.2) and free tier · Early-stage profile (251 followers, <3 month old account) with substance · Announced integrations with AgentOS and Aeon framework showing real adoption traction · Clear technical differentiation: local-first auditing vs publish-time scanners or enterprise gateways

Red flags: Extremely new account (created June 2026, only 2 months old) with limited track record · Token utility model (badge staking) not yet live, only described in tweets · Small engagement despite integrations suggests limited organic community growth so far