shell-scripts
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a collection of best-practice guidelines and templates for shell scripting. It includes comprehensive references for ShellCheck codes, portability matrices, and robust templates for logging and argument parsing.
- [INDIRECT_PROMPT_INJECTION]: As a tool designed to review and refactor user-provided shell scripts, the skill inherently possesses an ingestion surface for untrusted data. However, the workflow mitigates risks by focusing on syntax validation (
bash -n) and static analysis (shellcheck) rather than execution. The instructions emphasize safety, quoting, and bounded remediation passes, which are defensive in nature. - [COMMAND_EXECUTION]: The skill provides templates that include command execution (e.g.,
rsync,sed,grep). All examples follow security best practices, such as using arrays for command construction in Bash to prevent word splitting and shell injection vulnerabilities.
Audit Metadata