harden-bash
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a comprehensive educational and tooling resource for shell script hardening. It includes detailed markdown documentation on dialect portability, error semantics, filesystem safety, and input construction.
- [SAFE]: The provided example scripts (
atomic-replace.sh,safe-cli.sh,supervise-jobs.sh) demonstrate secure coding patterns, such as usingumaskfor temporary files, properly quoting variables to prevent word splitting/globbing, and using--to prevent option injection. - [SAFE]: The validation script (
scripts/validate-examples.sh) performs static analysis usingshellcheckandshfmtand runs behavioral tests inside isolated, read-only Docker containers with no network access, which is a highly secure practice for testing potentially destructive shell code. - [SAFE]: No malicious patterns such as prompt injection, unauthorized data exfiltration, or obfuscation were detected. All external references point to official GNU and POSIX documentation.
Audit Metadata