Ripgrep

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent ripgrep command-reference skill for local text search, with clearly documented optional commands that users should review before broad searches or bulk edits.

This skill appears safe and purpose-aligned for installing and using ripgrep. Before installing, remember that `rg` can search local file contents, and optional examples such as `--hidden`, `--no-ignore`, or `sed -i` bulk replacement should only be used deliberately in scoped directories.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running this command without review could make broad in-place edits across multiple files.

Why it was flagged

This optional example pipes matching filenames into `sed -i`, which can modify many files if the user runs it. It is documented under replacement operations and preceded by a preview example, so it is user-directed rather than hidden.

Skill content
rg "old_name" -l | xargs sed -i 's/old_name/new_name/g'
Recommendation

Preview matches first, restrict the path or file type, and use version control or backups before running bulk replacement commands.

What this means

If used in a sensitive directory, broader searches may reveal hidden, ignored, or private file contents in command output.

Why it was flagged

The instructions document flags that broaden search scope to hidden files and files normally excluded by `.gitignore`. This is expected for a search tool, but it can expose more local file contents to the agent's working context.

Skill content
rg "secret" --hidden

# Search all files (ignore .gitignore)
rg "pattern" --no-ignore
Recommendation

Run broad searches only in intended directories and prefer path, glob, or file-type filters when working around private or secret-bearing files.