fix(profile): avoid regex frontmatter field parsing

[kilo-code-bot]

Summary

• Replaces multiline regex field extraction for skill frontmatter with bounded line-by-line parsing to avoid polynomial ReDoS on uncontrolled markdown.
• Adds focused coverage for normal frontmatter extraction and long non-matching frontmatter lines.

Verification

N/A (backend-only parser change).

Visual Changes

N/A

Reviewer Notes

Targets CodeQL alert 426 only: https://github.com/Kilo-Org/cloud/security/code-scanning/426

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Executive Summary

The ReDoS fix correctly replaces two polynomial-backtracking multiline regexes with a bounded, linear line-by-line parser; logic is sound and test coverage is appropriate.

Files Reviewed (2 files)

• packages/cloud-agent-profile/src/profile-skills-service.ts
• packages/cloud-agent-profile/src/profile-skills-service.test.ts

Fix these issues in Kilo Cloud

---

_{Reviewed by claude-4.6-sonnet-20260217 · 330,873 tokens}

_{Review guidance: REVIEW.md from base branch main}

[RSO]

CC @eshurakov because this one feels like it has a little more meat to it then the other one-line changes