ast-grep
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the
ast-grepCLI tool using official package managers such as Homebrew (brew), NPM (npm), and Cargo (cargo). These are trusted registries for developer tools. - [COMMAND_EXECUTION]: The skill utilizes shell commands to execute the
ast-greputility for structural code analysis. The commands are constructed to run in the local environment for search purposes and do not exhibit dangerous execution patterns. - [SAFE]: No signs of obfuscation, hardcoded credentials, data exfiltration, or persistence mechanisms were found. The skill follows standard practices for documenting a CLI-based tool extension.
Audit Metadata