Security audit
Security checks for vulnerabilities and agentic risk
This is a regex reference skill with no bundled executable code, and its risky examples are visible command-line snippets rather than hidden behavior.
Before using the refactoring snippets, preview matches first, keep changes under version control, and scope commands to the intended files. Treat the validation regexes as examples rather than universal correctness guarantees.
The skill documents multiple in-place editing commands such as sed -i and bulk replacements piped through xargs, which can irreversibly modify many files if copied blindly. In the context of an agent skill intended for practical command reuse, the absence of warnings, dry-run alternatives, or backup guidance increases the chance of accidental codebase corruption or unintended mass edits.
The documentation includes a dedicated 'US phone' regex example, which privileges a specific locale without stating that it is only one regional example or providing guidance for other locales. Under the policy, locale-specific behavior should either be optional, clearly scoped, or accompanied by user choice.
No suspicious patterns detected.
