regex-mastery

SUSPICIOUS: the core regex content is benign and well-aligned with purpose, but the skill also instructs the agent to check for and offer installation of companion skills. That transitive installation behavior broadens trust beyond a regex guide, and publisher provenance is mildly inconsistent, though there is no evidence of credential theft, hidden execution, or direct exfiltration.