ast-grep-outline
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues detected. The skill is purely instructional and documents the use of a local static analysis tool.
- [NO_CODE]: There is no code shipped with this skill. It consists only of a SKILL.md file with usage instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for the agent to process external codebase data through structural outlining. * Ingestion points: Local source code files and directories (SKILL.md). * Boundary markers: Absent in the provided instructions. * Capability inventory: No internal execution capabilities, subprocess calls, or network operations are contained within the skill's files. * Sanitization: Absent; the tool performs static structural analysis rather than semantic content evaluation.
Audit Metadata