ast-grep
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides documentation and examples for using the ast-grep command-line tool to perform structural code searches based on Abstract Syntax Tree (AST) patterns.
- [COMMAND_EXECUTION]: The skill documents the use of ast-grep CLI commands such as scan and run to analyze local codebases. It includes specific instructions for the agent to escape metavariables (e.g., using $ or single quotes) to prevent shell command injection or unintended expansion during execution.
- [DATA_EXPOSURE]: The skill facilitates the structural search of local source code files. This behavior is consistent with the skill's primary purpose and occurs entirely within the local execution environment without external exfiltration.
Audit Metadata