diff --git a/scripts/security-audit.sh b/scripts/security-audit.sh
index 4bfa999..fde80fb 100644
--- a/scripts/security-audit.sh
+++ b/scripts/security-audit.sh
@@ -109,7 +109,7 @@ else
 fi
 
 # Check for dangerous path patterns
-if grep -rq "\\.\\./\|\\.\\.\\\\\" "$IMPL_DIR/src" | grep -v "test\|comment"; then
+if grep -rqE '\.\./|\.\.\\' "$IMPL_DIR/src"; then
     check "Hardcoded traversal patterns" "WARN" "Found ../ patterns - verify they're safe"
 else
     check "Hardcoded traversal patterns" "PASS"