The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The install.sh and install.ps1 scripts download the ast-grep binary from its official GitHub releases page (github.com/ast-grep/ast-grep) as a fallback when system package managers like brew, npm, or cargo are unavailable.
[COMMAND_EXECUTION]: The scripts/ast_grep_helper.py script executes the ast-grep (sg) binary using subprocess.run to perform structural searches and file modifications. The commands are constructed using argument lists rather than shell strings, mitigating command injection risks.
[PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it reads and processes external source code that could contain malicious instructions designed to influence the agent. Ingestion points: Any source code file within the directories scanned by the tool. Boundary markers: None; matched code segments are returned directly to the agent's context as plain text or JSON. Capability inventory: The skill can read local files, execute the ast-grep binary via subprocess, and perform file writes when the --apply flag is used. Sanitization: The helper script parses the raw output from the binary and reformats it, providing a structural layer between the raw source data and the agent.

ast-grep