For me, I feed the local LLM all the regexp/bash one-off scripts. Review everything because rm -rf is only funny at most once, if ever.