## Lesson — Validate member expressions in security rules

**Tags:** ast-grep, security
**Scope:** packages/pack-agent-security/test/**/*.ts

Targeting only bare identifiers for sensitive functions allows bypasses via member access; rules should explicitly check for calls on security-sensitive modules.
