bash-master

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides extensive documentation on preventing command injection. It explicitly warns against the use of eval with user input and demonstrates safe alternatives such as using arrays for command arguments and the -- delimiter to separate options from arguments.
  • [PRIVILEGE_ESCALATION]: Includes best practice templates for privilege management, including patterns for dropping root privileges in scripts and using chmod 600 for owner-only access to sensitive temporary files.
  • [EXTERNAL_DOWNLOADS]: References well-known and trusted community tools for script linting and testing, including ShellCheck, shfmt, and BATS. These references are provided for development environment setup and are standard in the shell scripting ecosystem.
  • [DATA_EXFILTRATION]: Encourages secure handling of credentials by advising against hardcoding secrets and recommending the use of environment variables, external configuration files, or user prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 06:19 AM