bash-defensive-patterns

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is entirely educational and focuses on promoting defensive programming techniques. It provides patterns to enhance script reliability and security, such as using set -Eeuo pipefail to catch errors early and ensure failures in piped commands are detected.
  • [SAFE]: It demonstrates safe temporary file management using mktemp and trap for automatic cleanup, which prevents common temporary file vulnerabilities and leftover data artifacts.
  • [SAFE]: The documentation emphasizes variable quoting and the use of modern Bash features like [[ ]] and mapfile to prevent word splitting, globbing issues, and unsafe iteration over command output.
  • [SAFE]: It includes patterns for atomic file writes and dependency checking, which are critical for building fault-tolerant and predictable automation tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 11:53 AM