[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M73FEJYY9DFWAAA4ET6ZKF1C":3,"skill-same:01M73FEJYY9DFWAAA4ET6ZKF1C":47},{"skillNo":4,"name":5,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":18,"linkOnly":19,"markdownContent":20,"markdownBody":21,"frontMatter":22,"refName":23,"commitSha":24,"skillDirectory":25,"forksCount":26,"repositoryHtmlUrl":27,"repositoryHomepageUrl":28,"ownerHtmlUrl":29,"ownerBlogUrl":30,"ownerDescription":31,"updatedAt":32,"install":33,"resources":46},"01M73FEJYY9DFWAAA4ET6ZKF1C","regex-escape-redos-guard",null,"Horonomos-laps\u002FYana-AI","Horonomos-laps","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F355299122?v=4","01M76B3QPXE88ET2SQPDPVATZT"," Horonomos-laps","01M72ZQRJPCYPSSWT4D00VJR2A",13,"Apache-2.0","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fregex-escape-redos-guard\u002FSKILL.md",[],[],"2026-11-11 15:11:14",false,"---\nname: regex-escape-redos-guard\ndescription: Prevent ReDoS (Regex Denial of Service) by escaping user-supplied regex special characters. escape-string-regexp patterns, catastrophic backtracking detection, safe dynamic regex construction, and timeout guards. Sources: sindresorhus\u002Fescape-string-regexp.\norigin: yana-ai — synthesized from sindresorhus\u002Fescape-string-regexp (MIT), OWASP ReDoS guidance\nlicense: Apache-2.0\nversion: 1.0.0\ncompatibility: yana-ai >= 1.3.48\n---\n\n# \u002Fregex-escape-redos-guard\n\n## When to Use\n\n- Building regex from user input or agent-supplied strings\n- Search\u002Freplace where the pattern comes from config\u002Fuser data\n- Escaping file names, URLs, or shell strings before regex use\n- Detecting and blocking catastrophically backtracking patterns\n\n## Do NOT use for\n\n- Sanitizing HTML\u002Fcode content (use [[dompurify-xss-prevention]])\n- Validating regex syntax (use a dedicated regex linter)\n\n---\n\n## Basic escaping\n\n```javascript\nimport escapeStringRegexp from 'escape-string-regexp'\n\nfunction safeSearch(haystack: string, needle: string, flags = 'gi'): RegExpMatchArray | null {\n  const escaped = escapeStringRegexp(needle)\n  \u002F\u002F All regex special chars escaped: . * + ? ^ $ { } [ ] | ( ) \\\n  return haystack.match(new RegExp(escaped, flags))\n}\n\n\u002F\u002F Without escaping — DANGEROUS:\n\u002F\u002F const re = new RegExp(userInput) ← ReDoS if userInput = '(a+)+'\n\u002F\u002F With escaping — safe:\nconst re = new RegExp(escapeStringRegexp(userInput))\n```\n\n---\n\n## DIY escaping (no dependency)\n\n```javascript\n\u002F\u002F escape-string-regexp implementation (tiny, copy inline if preferred)\nfunction escapeRegex(str: string): string {\n  return str.replace(\u002F[|\\\\{}()[\\]^$+*?.]\u002Fg, '\\\\$&').replace(\u002F-\u002Fg, '\\\\x2d')\n}\n```\n\n---\n\n## ReDoS patterns to reject (denylist)\n\n```javascript\n\u002F\u002F Patterns with catastrophic backtracking potential\nconst REDOS_PATTERNS = [\n  \u002F\\(.*\\+\\).*\\+\u002F,    \u002F\u002F (a+)+\n  \u002F\\(.*\\*\\).*\\*\u002F,    \u002F\u002F (a*)*\n  \u002F\\(.*\\|\\).*\\|\u002F,    \u002F\u002F alternation with empty branches\n  \u002F\\.\\*.*\\.\\*\u002F,      \u002F\u002F .*.* — exponential on non-matching input\n]\n\nfunction isReDoSSafe(pattern: string): boolean {\n  return !REDOS_PATTERNS.some(r => r.test(pattern))\n}\n\n\u002F\u002F Reject before compiling\nfunction safeRegex(pattern: string, flags = ''): RegExp {\n  if (!isReDoSSafe(pattern)) {\n    throw new Error(`[regex] potentially catastrophic pattern: ${pattern}`)\n  }\n  return new RegExp(pattern, flags)\n}\n```\n\n---\n\n## Timeout guard (Node.js worker thread)\n\n```javascript\nimport { Worker, isMainThread, workerData, parentPort } from 'worker_threads'\n\n\u002F\u002F Run regex in a worker with a timeout to kill it if it hangs\nfunction regexWithTimeout(\n  input:    string,\n  pattern:  string,\n  timeoutMs = 100\n): Promise\u003Cstring[] | null> {\n  return new Promise((resolve, reject) => {\n    const worker = new Worker(__filename, {\n      workerData: { input, pattern }\n    })\n    const timer = setTimeout(() => {\n      worker.terminate()\n      reject(new Error('[regex] timeout — possible ReDoS'))\n    }, timeoutMs)\n\n    worker.on('message', (result) => { clearTimeout(timer); resolve(result) })\n    worker.on('error',   (err)    => { clearTimeout(timer); reject(err) })\n  })\n}\n\nif (!isMainThread) {\n  const { input, pattern } = workerData\n  const match = input.match(new RegExp(pattern, 'g'))\n  parentPort!.postMessage(match)\n}\n```\n\n---\n\n## Anti-Fake-Pass Checklist\n\n```\n❌ new RegExp(userInput) without escaping → ReDoS or injection of any pattern\n❌ denylist pattern approach alone (imperfect) → pair with escaping or timeout\n❌ Timeout guard kills worker but request hangs → must resolve\u002Freject in timeout handler\n❌ Flag 'g' + lastIndex not reset → regex object stateful, skips matches on second call\n❌ Backslash in input not escaped → \\\\w in user input becomes \\w (wildcard) in regex\n```\n","# \u002Fregex-escape-redos-guard\n\n## When to Use\n\n- Building regex from user input or agent-supplied strings\n- Search\u002Freplace where the pattern comes from config\u002Fuser data\n- Escaping file names, URLs, or shell strings before regex use\n- Detecting and blocking catastrophically backtracking patterns\n\n## Do NOT use for\n\n- Sanitizing HTML\u002Fcode content (use [[dompurify-xss-prevention]])\n- Validating regex syntax (use a dedicated regex linter)\n\n---\n\n## Basic escaping\n\n```javascript\nimport escapeStringRegexp from 'escape-string-regexp'\n\nfunction safeSearch(haystack: string, needle: string, flags = 'gi'): RegExpMatchArray | null {\n  const escaped = escapeStringRegexp(needle)\n  \u002F\u002F All regex special chars escaped: . * + ? ^ $ { } [ ] | ( ) \\\n  return haystack.match(new RegExp(escaped, flags))\n}\n\n\u002F\u002F Without escaping — DANGEROUS:\n\u002F\u002F const re = new RegExp(userInput) ← ReDoS if userInput = '(a+)+'\n\u002F\u002F With escaping — safe:\nconst re = new RegExp(escapeStringRegexp(userInput))\n```\n\n---\n\n## DIY escaping (no dependency)\n\n```javascript\n\u002F\u002F escape-string-regexp implementation (tiny, copy inline if preferred)\nfunction escapeRegex(str: string): string {\n  return str.replace(\u002F[|\\\\{}()[\\]^$+*?.]\u002Fg, '\\\\$&').replace(\u002F-\u002Fg, '\\\\x2d')\n}\n```\n\n---\n\n## ReDoS patterns to reject (denylist)\n\n```javascript\n\u002F\u002F Patterns with catastrophic backtracking potential\nconst REDOS_PATTERNS = [\n  \u002F\\(.*\\+\\).*\\+\u002F,    \u002F\u002F (a+)+\n  \u002F\\(.*\\*\\).*\\*\u002F,    \u002F\u002F (a*)*\n  \u002F\\(.*\\|\\).*\\|\u002F,    \u002F\u002F alternation with empty branches\n  \u002F\\.\\*.*\\.\\*\u002F,      \u002F\u002F .*.* — exponential on non-matching input\n]\n\nfunction isReDoSSafe(pattern: string): boolean {\n  return !REDOS_PATTERNS.some(r => r.test(pattern))\n}\n\n\u002F\u002F Reject before compiling\nfunction safeRegex(pattern: string, flags = ''): RegExp {\n  if (!isReDoSSafe(pattern)) {\n    throw new Error(`[regex] potentially catastrophic pattern: ${pattern}`)\n  }\n  return new RegExp(pattern, flags)\n}\n```\n\n---\n\n## Timeout guard (Node.js worker thread)\n\n```javascript\nimport { Worker, isMainThread, workerData, parentPort } from 'worker_threads'\n\n\u002F\u002F Run regex in a worker with a timeout to kill it if it hangs\nfunction regexWithTimeout(\n  input:    string,\n  pattern:  string,\n  timeoutMs = 100\n): Promise\u003Cstring[] | null> {\n  return new Promise((resolve, reject) => {\n    const worker = new Worker(__filename, {\n      workerData: { input, pattern }\n    })\n    const timer = setTimeout(() => {\n      worker.terminate()\n      reject(new Error('[regex] timeout — possible ReDoS'))\n    }, timeoutMs)\n\n    worker.on('message', (result) => { clearTimeout(timer); resolve(result) })\n    worker.on('error',   (err)    => { clearTimeout(timer); reject(err) })\n  })\n}\n\nif (!isMainThread) {\n  const { input, pattern } = workerData\n  const match = input.match(new RegExp(pattern, 'g'))\n  parentPort!.postMessage(match)\n}\n```\n\n---\n\n## Anti-Fake-Pass Checklist\n\n```\n❌ new RegExp(userInput) without escaping → ReDoS or injection of any pattern\n❌ denylist pattern approach alone (imperfect) → pair with escaping or timeout\n❌ Timeout guard kills worker but request hangs → must resolve\u002Freject in timeout handler\n❌ Flag 'g' + lastIndex not reset → regex object stateful, skips matches on second call\n❌ Backslash in input not escaped → \\\\w in user input becomes \\w (wildcard) in regex\n```\n",{},"main","481dcd7dd2e288b9d627a2bd017db70e64e6c6fa","core\u002Fskills\u002Fregex-escape-redos-guard",1,"https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI","https:\u002F\u002Fyana.vutam.link\u002F","https:\u002F\u002Fgithub.com\u002FHoronomos-laps","https:\u002F\u002Fyana.vutam.link","An open-source governed runtime & execution environment for multi-agent AI systems.","2026-11-11 23:56:26",{"source":7,"skillName":5,"commands":34,"prompt":44,"zipAvailable":45},[35,38,41],{"tool":36,"command":37},"npx","npx skills add Horonomos-laps\u002FYana-AI --skill regex-escape-redos-guard",{"tool":39,"command":40},"bunx","bunx skills add Horonomos-laps\u002FYana-AI --skill regex-escape-redos-guard",{"tool":42,"command":43},"pnpm","pnpm dlx skills add Horonomos-laps\u002FYana-AI --skill regex-escape-redos-guard","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fregex-escape-redos-guard\u002FSKILL.md",true,[],[48,56,63,71,79,87],{"skillNo":49,"name":50,"nameZh":6,"description":51,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":52,"licenseFileUrl":6,"sourceHtmlUrl":53,"categories":54,"keywords":55,"publishedAt":18},"01M735GKET5YVYKAY62W2P5YXB","openai--sentry--sentry","Use when the user asks to inspect Sentry issues or events, summarize recent production errors, or pull basic Sentry health data via the Sentry API; perform read-only queries with the bundled script and require `SENTRY_AUTH_TOKEN`.","MIT","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fopenai--sentry--sentry\u002FSKILL.md",[],[],{"skillNo":57,"name":58,"nameZh":6,"description":59,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":60,"categories":61,"keywords":62,"publishedAt":18},"01M73DCAP83T17HY7SMGK7MGFE","ito-basket-compare","Compare Itô prediction-market baskets against a user's knowledge base, portfolio notes, financial context, watchlist, or research thesis. Use for read-only basket comparison and gap analysis without investment advice or live trading.","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fito-basket-compare\u002FSKILL.md",[],[],{"skillNo":64,"name":65,"nameZh":6,"description":66,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":67,"sourceHtmlUrl":68,"categories":69,"keywords":70,"publishedAt":18},"01M734CYEMZFDR3KH6SW0JP8TD","implementing-network-traffic-baselining","Build network traffic baselines from NetFlow\u002FIPFIX data using Python pandas for statistical analysis, z-score anomaly detection, and hourly\u002Fdaily traffic pattern profiling","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-network-traffic-baselining\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-network-traffic-baselining\u002FSKILL.md",[],[],{"skillNo":72,"name":73,"nameZh":6,"description":74,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":75,"sourceHtmlUrl":76,"categories":77,"keywords":78,"publishedAt":18},"01M73ASZ6NJRJM44Z2P84NGQ3Q","detecting-evasion-techniques-in-endpoint-logs","Detects defense evasion techniques used by adversaries in endpoint logs including log tampering, timestomping, process injection, and security tool disabling. Use when investigating suspicious endpoint behavior, building detection rules for evasion tactics, or conducting threat hunting for stealthy adversary activity. Activates for requests involving evasion detection, defense evasion analysis, log tampering detection, or MITRE ATT&CK TA0005.","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fdetecting-evasion-techniques-in-endpoint-logs\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fdetecting-evasion-techniques-in-endpoint-logs\u002FSKILL.md",[],[],{"skillNo":80,"name":81,"nameZh":6,"description":82,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":83,"sourceHtmlUrl":84,"categories":85,"keywords":86,"publishedAt":18},"01M734AFNXD06Z78QRK0VKGT7Q","implementing-microsegmentation-with-guardicore","Implementing microsegmentation using Akamai Guardicore Segmentation to map application dependencies, create granular network policies, visualize east-west traffic flows, and enforce least-privilege communication between workloads across data centers and cloud.","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-microsegmentation-with-guardicore\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-microsegmentation-with-guardicore\u002FSKILL.md",[],[],{"skillNo":88,"name":89,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":90,"categories":91,"keywords":92,"publishedAt":18},"01M736TK27QMCXK0DVCH25SJN5","ramdisk-tmpfs-patterns","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Framdisk-tmpfs-patterns\u002FSKILL.md",[],[]]