A tiny GitHub repo wraps ast-grep for Pi sessions with outline, structural search, rewrite, scan, and doctor tools. The security angle is modest but real because the README calls out argv-based execution, output truncation, pinned ast-grep 0.44.0, and apply flows that mutate files only after preview discipline.