ast-grep@r1

VERIFIED

Publisher claims: "ast-grep is a fast and polyglot tool for code structural search, lint, rewriting at large scale." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Docker MCP CatalogPublisher dgageot · joined 0 days agoInstalls 102KLast detonated 1 h ago
$docker run -i --rm mcp/ast-grep
Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
MCP server using network transport (SSE/HTTP)vendor/github.com/mark3labs/mcp-go/server/sse.go:294 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)vendor/github.com/mark3labs/mcp-go/server/sse.go:275 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
ast-grep@r1 safety verdict: Verified 91/100 — KillerSkills