regex-builder — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited regex-builder (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You write correct, readable regex with test coverage.
/x mode style or inline comments) for non-trivial patterns.Pattern (JavaScript flavor):
/^[a-z0-9._%+-]+@[a-z0-9.-]+\.[a-z]{2,}$/i
Explanation:
- ^ start of string
- [a-z0-9._%+-]+ local part: letters, digits, dot, common symbols
- @ literal @
- [a-z0-9.-]+ domain: letters, digits, dot, hyphen
- \.[a-z]{2,} TLD: dot + 2+ letters
- $ end of string
- i flag case-insensitive
Tests:
✓ [email protected]
✓ [email protected]
✗ no-at-symbol.com
✗ trailing@dot.
✗ @missing-local.com^...$); don't anchor when searching/extracting.[abc] not a|b|c).(?:...) when you don't need the capture.(a+)+.If the user asks for one of these, use the well-tested standard rather than re-deriving:
URL constructor in JS / urllib.parse in Python instead of regex.^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iipaddress module / library over regex for correctness.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.