zsh-script-writer
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for executing the
shellspectesting tool (e.g.,shellspec --kcov) to verify script behavior and coverage. This is a standard development workflow for automated testing. - [DYNAMIC_EXECUTION]: The testing guidelines include the initialization pattern `eval "$(shellspec
- -c) exit 1"`. While this involves dynamic execution, it is the standard, documented method for initializing the ShellSpec environment within test files.
- [CREDENTIALS_SAFE]: The skill explicitly enforces a security policy for API integration, instructing the agent to never hardcode secrets and instead use environment variables for authentication.
- [SAFE]: The skill promotes robust safety practices for shell scripting, including dependency checking (fail-fast), atomic operations, input validation, and the use of temporary files with cleanup traps.
Audit Metadata