Install
$ agentstack add skill-hatch3r-hatch3r-hatch3r-cli-ripgrep ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
ripgrep
Fast recursive grep with sane defaults and gitignore awareness
§0 — Ambiguity & Safety Gate (P8 B1)
Before invoking rg, resolve these via agents/shared/user-question-protocol.md (default behavior, not exception-driven):
- Scope: when the search root is ambiguous or the request implies piercing ignore rules (
--no-ignore,--hidden) over a large tree, confirm the intended path before running — an unscoped scan over a monorepo can return tens of thousands of hits. - Irreversibility:
rgis read-only — it never mutates files, so no destructive confirmation is needed. The only risk is unbounded output flooding context; cap with--max-count/-l/-cwhen match density is unknown. - Ambiguity: when the request maps to two or more pattern interpretations (literal
-Fvs regex, case-sensitive vs-i), ask which one.
Fan-out Discipline (P8 B2)
Tier 1 reference card — no fan-out. This skill is a single-tool usage reference an agent consults inline; it spawns no sub-agents. Fan-out is owned by the calling workflow per its own Fan-out Discipline block. Source: rules/hatch3r-fan-out-discipline.md (P8 B2).
When to Use
Reach for rg when the task is in the search category and the agent would otherwise call an MCP tool or read large outputs into context.
Token Cost
CLI tools return structured stdout that fits in `.
Alternatives
| Tool | When to prefer | |------|----------------| | ast-grep (toolbox section) | Structural code patterns: matchers like console.log($MSG) that survive whitespace and identifier renames. | | git grep | Search at a specific revision, tag, or stash — rg only reads the working tree. | | fd (hatch3r-cli-fd) piped into rg | Filename pre-filter when scoping by extension/age is faster than rg --type. | | grep -RIn | POSIX-only environment where ripgrep is not on PATH and install is blocked. |
Detection / Install
Verify with:
command -v rg
Install (macOS — default for this machine):
# brew
brew install ripgrep
Install (Linux):
# apt
sudo apt install ripgrep
Install (Windows):
# scoop
scoop install ripgrep
Homepage: https://github.com/BurntSushi/ripgrep
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: hatch3r
- Source: hatch3r/hatch3r
- License: MIT
- Homepage: https://docs.hatch3r.com
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.