Agent skill

Ast Grep Code Analysis

by Sidiora-Labs in Sidiora-Labs/centra-llm-agents

A skill your agent uses when analyzing complex codebases for security vulnerabilities, performance issues, and structural patterns - provides systematic AST-based approach using ast-grep for…

Custom licenceAuto-check passed

Install Ast Grep Code Analysis

skills CLI
$ npx skills add Sidiora-Labs/centra-llm-agents --skill ast-grep-code-analysis -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install Sidiora-Labs/centra-llm-agents ast-grep-code-analysis --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/Sidiora-Labs/centra-llm-agents.git skills-src && mkdir -p .claude/skills && cp -r skills-src/protocol/skills/ast-grep-code-analysis .claude/skills/ast-grep-code-analysis && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
ast-grep-code-analysis
GitHub stars
115
Token cost
~1.9k tokens
SKILL.md length
418 words
Files
2
Skills in repo
30
Repo updated
First seen
Licence
Custom licence

At a glance

A skill your agent uses when analyzing complex codebases for security vulnerabilities, performance issues, and structural patterns - provides systematic AST-based approach using ast-grep for…

  • Works in 5 steps: Setup: Create rule sets for security,… → Baseline: Run analysis on existing… → Iterate: Refine rules based on false… → …
  • Analyzing complex codebases for security vulnerabilities
  • SKILL.md covers Overview, When to Use, Core Pattern and Quick Reference, plus 4 more sections
  • Calls npm and mise

What it does

Ast Grep Code Analysis is an agent skill from Sidiora-Labs/centra-llm-agents. Use when analyzing complex codebases for security vulnerabilities, performance issues, and structural patterns - provides systematic AST-based approach using ast-grep for comprehensive code understanding beyond manual inspection

Its SKILL.md is about 1.9k tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file.

The repository describes itself as: A stateful AI operating system for serious, long-horizon work.

When your agent uses it

  • Analyzing complex codebases for security vulnerabilities
  • Performance issues
  • Structural patterns - provides systematic AST-based approach using ast-grep for comprehensive code understanding beyond manual inspection

Example prompts

  • “/ast-grep-code-analysis”

Requirements

  • Node.js

Workflow steps

5 steps, taken from the first numbered list in SKILL.md.

  1. Setup: Create rule sets for security, performance, structure
  2. Baseline: Run analysis on existing codebase to establish patterns
  3. Iterate: Refine rules based on false positives/negatives
  4. Automate: Integrate into CI/CD pipeline for continuous analysis
  5. Monitor: Track issue reduction over time

What it can do on your machine

Read from SKILL.md and the folder at commit 01c6aef. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • npm
    • mise

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use npm, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Ast Grep Code Analysis loads about 1.9k tokens when it runs. Until then it costs about 63 tokens; SKILL.md has 418 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~63
When it runs · the whole SKILL.md, loaded when a task matches
~1.9k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 418 words (~1,948 tokens).

“AST-Grep Code Analysis uses Abstract Syntax Tree pattern matching to systematically identify code issues, replacing manual line-by-line inspection with structural pattern recognition.”

— opening of SKILL.md by Sidiora-Labs, Custom licence
name
ast-grep-code-analysis

Read the full SKILL.md on GitHub

Files

SKILL.md and 1 other file in protocol/skills/ast-grep-code-analysis of Sidiora-Labs/centra-llm-agents.

  • SKILL.md
  • SKILL.mtx

Open the folder on GitHubat commit 01c6aef

Compare with similar skills

Ast Grep Code Analysis next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Ast Grep Code Analysis compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Ast Grep Code Analysis this skillSidiora-Labs/centra-llm-agents115—~1.9kAutomated safety check: PassCustom licence
Ast Grepccusage/ccusage19k—~296Automated safety check: PassCustom licence
ast-grep Structural Searchcode-yeongyu/oh-my-openagent70k—~3.3kAutomated safety check: PassMIT
Analyzing Sbom For Supply Chain Vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills34k—~2.9kAutomated safety check: PassApache-2.0
Ast Grep Findparcadei/Continuous-Claude-v33.9k1 repos~677Automated safety check: NotesMIT
Codebase Onboardingaffaan-m/ECC274k3 repos~2kAutomated safety check: PassMIT

Similar skills

  • Ast Grep

    ccusage/ccusage

    Guides ccusage structural code searches with ast-grep. An agent skill from ccusage/ccusage.

    19k GitHub stars~296 tokensUpdated today
    DevelopmentAuto-check passed
  • ast-grep Structural Search

    code-yeongyu/oh-my-openagent

    Searches and rewrites code by syntax-tree shape across 25 languages with ast-grep, for codemods, structural queries and YAML lint rules, using a Python wrapper script.

    70k GitHub stars~3.3k tokensUpdated today
    DevelopmentAuto-check passed
  • Analyzing Sbom For Supply Chain Vulnerabilities

    mukul975/Anthropic-Cybersecurity-Skills

    Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON formats to identify supply chain vulnerabilities by correlating components against the NVD CVE database via the NVD 2.0 API.

    34k GitHub stars~2.9k tokensUpdated 1 mo ago
    SecurityAuto-check passed
  • Ast Grep Find

    parcadei/Continuous-Claude-v3

    AST-based code search and refactoring via ast-grep MCP. An agent skill from parcadei/Continuous-Claude-v3.

    3.9k GitHub starsUsed in 1 repo~677 tokens
    DevelopmentAuto-check: notes
  • Analyze an unfamiliar codebase and generate a structured onboarding guide with architecture map, key entry points, conventions, and a starter CLAUDE.md.

    274k GitHub starsUsed in 3 repos~2k tokens
    DevelopmentAuto-check passed
  • Structural Code Search with ast-grep

    warp-drive-data/warp-drive

    Turns natural-language code queries into ast-grep rules for structural search, testing each rule against an example file before running it on a codebase.

    3.2k GitHub starsUsed in 5 repos~2.4k tokens
    DevelopmentAuto-check passed

More from Sidiora-Labs/centra-llm-agents

All 30 skills in this repo
  • LLM Docs Optimizer

    Sidiora-Labs/centra-llm-agents

    Optimize documentation for AI coding assistants and LLMs. An agent skill from Sidiora-Labs/centra-llm-agents.

    115 GitHub stars~5.4k tokensUpdated 19 days ago
    Auto-check passed
  • Code Quality

    Sidiora-Labs/centra-llm-agents

    Code quality standards and best practices. An agent skill from Sidiora-Labs/centra-llm-agents.

    115 GitHub stars~1.2k tokensUpdated 19 days ago
    Auto-check passed
  • Coding Patterns

    Sidiora-Labs/centra-llm-agents

    Coding patterns and best practices for development. An agent skill from Sidiora-Labs/centra-llm-agents.

    115 GitHub stars~476 tokensUpdated 19 days ago
    Auto-check passed
  • Date Formatting

    Sidiora-Labs/centra-llm-agents

    Date and time formatting for applications. An agent skill from Sidiora-Labs/centra-llm-agents.

    115 GitHub stars~813 tokensUpdated 19 days ago
    Auto-check passed
  • Error Handling

    Sidiora-Labs/centra-llm-agents

    Error handling patterns and best practices. An agent skill from Sidiora-Labs/centra-llm-agents.

    115 GitHub stars~955 tokensUpdated 19 days ago
    Auto-check passed
  • I18n

    Sidiora-Labs/centra-llm-agents

    Internationalization and translation management. An agent skill from Sidiora-Labs/centra-llm-agents.

    115 GitHub stars~760 tokensUpdated 19 days ago
    Auto-check passed

Questions about Ast Grep Code Analysis

What does Ast Grep Code Analysis do?

A skill your agent uses when analyzing complex codebases for security vulnerabilities, performance issues, and structural patterns - provides systematic AST-based approach using ast-grep for…. Ast Grep Code Analysis is an agent skill from Sidiora-Labs/centra-llm-agents.

When should I use Ast Grep Code Analysis?

Ast Grep Code Analysis fits situations like: analyzing complex codebases for security vulnerabilities; performance issues; structural patterns - provides systematic AST-based approach using ast-grep for comprehensive code understanding beyond manual inspection.

How do I install Ast Grep Code Analysis in Claude Code?

Run `npx skills add Sidiora-Labs/centra-llm-agents --skill ast-grep-code-analysis -a claude-code`. Or copy the skill folder (protocol/skills/ast-grep-code-analysis in Sidiora-Labs/centra-llm-agents) into .claude/skills/ast-grep-code-analysis in your project. Claude Code loads it when a task matches its description.

How do I install Ast Grep Code Analysis in Codex?

Run `npx skills add Sidiora-Labs/centra-llm-agents --skill ast-grep-code-analysis -a codex`. Or copy the skill folder (protocol/skills/ast-grep-code-analysis in Sidiora-Labs/centra-llm-agents) into .agents/skills/ast-grep-code-analysis in your project. Codex loads it when a task matches its description.

Can I use Ast Grep Code Analysis in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add Sidiora-Labs/centra-llm-agents --skill ast-grep-code-analysis -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/ast-grep-code-analysis, .gemini/skills/ast-grep-code-analysis, .github/skills/ast-grep-code-analysis and .opencode/skills/ast-grep-code-analysis in your project.

What does Ast Grep Code Analysis need to run?

Going by SKILL.md and its folder, Ast Grep Code Analysis needs the command-line tools its instructions call (npm and mise). Our summary lists: Node.js.

Does Ast Grep Code Analysis access the network?

SKILL.md contains no URLs. Its commands use npm, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is Ast Grep Code Analysis safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Ast Grep Code Analysis use?

Ast Grep Code Analysis has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does Ast Grep Code Analysis use?

About 1.9k tokens (SKILL.md is roughly 7.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Ast Grep Code Analysis?

Skills that share tags, products or a category with Ast Grep Code Analysis: Ast Grep (ccusage/ccusage, 19k stars), ast-grep Structural Search (code-yeongyu/oh-my-openagent, 70k stars), Analyzing Sbom For Supply Chain Vulnerabilities (mukul975/Anthropic-Cybersecurity-Skills, 34k stars) and Ast Grep Find (parcadei/Continuous-Claude-v3, 3.9k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Ast Grep Code Analysis?

Sidiora-Labs (a GitHub organization) maintains it in Sidiora-Labs/centra-llm-agents, which has 115 GitHub stars. The repository holds 30 skills in this directory. The repository was last updated on September 18, 2026.

Source: Sidiora-Labs/centra-llm-agents on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.