harden-bash

Pass

Audited by Gen Agent Trust Hub on Nov 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a comprehensive educational and tooling resource for shell script hardening. It includes detailed markdown documentation on dialect portability, error semantics, filesystem safety, and input construction.
  • [SAFE]: The provided example scripts (atomic-replace.sh, safe-cli.sh, supervise-jobs.sh) demonstrate secure coding patterns, such as using umask for temporary files, properly quoting variables to prevent word splitting/globbing, and using -- to prevent option injection.
  • [SAFE]: The validation script (scripts/validate-examples.sh) performs static analysis using shellcheck and shfmt and runs behavioral tests inside isolated, read-only Docker containers with no network access, which is a highly secure practice for testing potentially destructive shell code.
  • [SAFE]: No malicious patterns such as prompt injection, unauthorized data exfiltration, or obfuscation were detected. All external references point to official GNU and POSIX documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 3, 2026, 10:12 PM