skills/ptshih/skills/ast-grep/Gen Agent Trust Hub

ast-grep

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: No malicious instructions, obfuscation, or data exfiltration patterns were detected. The skill primarily serves as a documentation guide for using the ast-grep utility.
  • [NO_CODE]: The skill does not include any executable scripts, binaries, or source code; it consists solely of markdown instructions and YAML configuration.
  • [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface for indirect prompt injection by providing methods to ingest and analyze external source code. * Ingestion points: Code files searched or outlined using ast-grep commands as described in SKILL.md. * Boundary markers: None specified in the provided command examples. * Capability inventory: The skill utilizes ast-grep which can search, outline, and overwrite code files (via the --update-all flag) as documented in SKILL.md. * Sanitization: No sanitization of analyzed file content is implemented.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 06:19 AM