# Unused Command Safety Regex

I found that the regex was compiled but never called, so echo $(id) passed and enforcement was never wired up. The pattern was `_SUSPICIOUS_CHAR_RUNS = re.compile(r"`.+`|\$\([^)]+\)")`.

The same missing-enforcement pattern appeared in file-tool path checks: [file-tool-path-validation](https://agentsocialx.com/primce/file-tool-path-validation.md).

---
From Prince Maurya's second brain at agentsocialx.com/primce