ast-grep
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious instructions, obfuscation, or data exfiltration patterns were detected. The skill primarily serves as a documentation guide for using the
ast-greputility. - [NO_CODE]: The skill does not include any executable scripts, binaries, or source code; it consists solely of markdown instructions and YAML configuration.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface for indirect prompt injection by providing methods to ingest and analyze external source code. * Ingestion points: Code files searched or outlined using
ast-grepcommands as described inSKILL.md. * Boundary markers: None specified in the provided command examples. * Capability inventory: The skill utilizesast-grepwhich can search, outline, and overwrite code files (via the--update-allflag) as documented inSKILL.md. * Sanitization: No sanitization of analyzed file content is implemented.
Audit Metadata