The Agent Skills Directory

[SAFE]: The skill is a standard wrapper for the 'ast-grep' command-line utility. All scripts and instructions are consistent with the tool's documented purpose of performing syntax-tree based code analysis.
[EXTERNAL_DOWNLOADS]: The scripts/install.sh script automates the installation of 'ast-grep' by attempting to use well-known package managers including Homebrew, Cargo, NPM, and PyPI. These are well-known services and represent safe sources for software distribution.
[COMMAND_EXECUTION]: The skill relies on executing the 'ast-grep' binary and a bundled Python script (scripts/json-summary.py) to search and summarize code patterns. The tests/test_json_summary.py file uses subprocess.run to test the summary script, which is a standard and safe implementation for unit testing.
[PRIVILEGE_ESCALATION]: The installation script includes a command to use sudo port install as a fallback. This is a standard requirement for the MacPorts package manager and is gated by a check for an interactive terminal, minimizing the risk of silent or unauthorized privilege escalation.

ast-grep