ast-grep

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of the ast-grep CLI tool using official package managers such as Homebrew (brew), NPM (npm), and Cargo (cargo). These are trusted registries for developer tools.
  • [COMMAND_EXECUTION]: The skill utilizes shell commands to execute the ast-grep utility for structural code analysis. The commands are constructed to run in the local environment for search purposes and do not exhibit dangerous execution patterns.
  • [SAFE]: No signs of obfuscation, hardcoded credentials, data exfiltration, or persistence mechanisms were found. The skill follows standard practices for documenting a CLI-based tool extension.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 03:30 AM
Security Audit — agent-trust-hub — ast-grep