bash-script-validator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/shellcheck_wrapper.shscript downloads theshellcheck-pypackage from the Python Package Index (PyPI) to ensure static analysis capabilities are available when the system lacks a local ShellCheck binary. PyPI is a well-known service and the package is a standard utility for this purpose.\n- [COMMAND_EXECUTION]: The validator executes system shell interpreters (bash -nandsh -n) and the ShellCheck tool to verify the syntax and quality of the provided scripts.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted shell scripts for validation. There is a potential risk that malicious scripts could contain instructions designed to influence the agent when it reviews the tool's output. \n - Ingestion points: Target scripts provided to
scripts/validate.sh.\n - Boundary markers: Absent; the tool reads the full text of the script.\n
- Capability inventory: Executes shell interpreters for syntax checks and runs ShellCheck for static analysis.\n
- Sanitization: None; the tool reports raw findings from the script's content.
Audit Metadata