ast-grep
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The installation scripts (
install.shandinstall.ps1) fetch theast-grepbinary from its official and well-known GitHub repository (github.com/ast-grep/ast-grep). This is a documented process for initializing the skill's core functionality. - [COMMAND_EXECUTION]: The Python helper script (
scripts/ast_grep_helper.py) executes theast-grepbinary using thesubprocessmodule. This behavior is necessary for performing AST-aware searches and rewrites on the local filesystem as requested by the user. - [SAFE]: The skill implements best practices such as offline pattern validation to catch common errors before execution. It does not attempt to access sensitive credentials, establish persistence, or exfiltrate data.
Audit Metadata