ast-grep
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
ast-grepcommand-line utility for code analysis tasks, such as scanning directories and running structural search patterns. This is the primary and intended function of the skill. - [SAFE]: The documentation explicitly advises users and the agent on proper shell escaping for metavariables (e.g., using
\$VARinstead of$VAR) to prevent shell injection or unintended variable expansion during command execution. - [SAFE]: No indicators of data exfiltration, unauthorized network access, or malicious persistence were found. The skill operates exclusively on local codebases as requested by the user.
Audit Metadata