Skills
skills/code-yeongyu/lazycodex/ast-grep/Gen Agent Trust Hub

ast-grep

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the ast-grep binary from its official GitHub repository releases during the installation process (install.sh and install.ps1). This is a legitimate operation to fetch the core tool required for the skill's functionality.
  • [COMMAND_EXECUTION]: The scripts/ast_grep_helper.py script executes the ast-grep binary using subprocess.run. This is necessary for performing the structural code searches and modifications requested by the user. The commands are constructed as lists rather than shell strings, reducing the risk of command injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 11:37 AM
Security Audit — agent-trust-hub — ast-grep