grepwrapper

• Risk level: Low
• Analyzed: Feb 18, 2026, 9:26 PM
• Findings: 0
• Version: 0.3.0

Overview

The skill's requirements and runtime instructions match its stated purpose (searching code via the grepwrapper CLI), but it installs an unreviewed npm package from a GitHub repo so exercise caution before installing globally.

This skill appears to do what it says, but it installs an npm package directly from a GitHub repository. Before installing: review the GitHub repo (package.json, install/postinstall scripts, recent commits), prefer a released/pinned commit or official package, avoid global installation on sensitive hosts, or run the CLI in a sandbox/container. If you cannot review the repo, treat the install as higher-risk and consider alternative vetted tools or performing searches via the grep.app web UI or official APIs.