skills/cnife/skills/ast-grep/Gen Agent Trust Hub

ast-grep

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes install.sh and install.ps1 scripts that download the ast-grep binary from its official GitHub repository (github.com/ast-grep/ast-grep). This is a necessary and transparent operation for the skill to function, targeting the official release assets of the tool being wrapped.
  • [COMMAND_EXECUTION]: The core functionality resides in scripts/ast_grep_helper.py, which executes the ast-grep binary using subprocess.run. Arguments are handled securely as a list to prevent shell injection, and the tool's execution is restricted to the intended purpose of code analysis and modification.
  • [PROMPT_INJECTION]: The skill's instructions in SKILL.md are focused on technical guidance for structural search and rewrite tasks. No patterns aimed at overriding agent safety guidelines or hijacking behavior were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 09:52 AM
Security Audit — agent-trust-hub — ast-grep