bash-52-features
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill includes a configuration validation example containing
export API_KEY="secret123". This is a common dummy placeholder used for instructional purposes and does not represent a leaked credential. - [EXTERNAL_DOWNLOADS]: The documentation references official Bash 5.2 resources, including the GNU source distribution and official news files hosted at Case Western Reserve University.
- [COMMAND_EXECUTION]: The skill includes a performance benchmark script that utilizes the
awksystem utility to calculate execution time differences. This is a standard and safe use of system tooling in a shell context. - [INDIRECT_PROMPT_INJECTION]: Several examples demonstrate functions for handling external data (
read_input,sanitize_filename,parse_url). These examples follow security best practices by using regular expression validation and safe variable assignment (printf -v) to prevent typical shell-based injection vulnerabilities.
Audit Metadata