Skills
Navigate
skills/rolandbrecht/agent-skills/ast-grep/Gen Agent Trust Hub

ast-grep

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill utilizes the legitimate ast-grep open-source tool for structural code analysis and transformation.
  • [COMMAND_EXECUTION]: The included installation script (scripts/install.sh) automates environment setup using standard system commands and utilizes sudo only for the official MacPorts installation path.
  • [REMOTE_CODE_EXECUTION]: The skill facilitates the installation of official ast-grep binaries from trusted, well-known package registries including Homebrew, NPM, and PyPI.
  • [PROMPT_INJECTION]: As a code analysis tool, the skill processes potentially untrusted codebase content. However, its reliance on structural syntax matching rather than text-based search inherently minimizes the risk of the agent misinterpreting embedded code comments as instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 10:48 AM
Security Audit — agent-trust-hub — ast-grep