treesitter
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and executes the
treesitter-toolspackage from the vendor's GitHub repository (github.com/grahama1970/treesitter-tools.git) using theuvxutility. This is used to provide the core symbol extraction functionality and is documented in the skill's quick start guide. - [COMMAND_EXECUTION]: The
run.shscript executes shell commands to facilitate symbol extraction. It also sources a local.envfile from the project root to load environment variables, which is a standard method for providing configuration to the tool.
Audit Metadata