shellcheck-configuration
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation provides instructions to download the ShellCheck source code from its official repository on GitHub and install it via package managers like brew or apt-get.
- [PRIVILEGE_ESCALATION]: The guide includes examples of using sudo to install the tool on Linux systems through standard administrative package management commands.
- [COMMAND_EXECUTION]: The skill lists numerous shell commands for running static analysis, managing project configurations, and automating linting tasks in CI/CD environments using tools like find, xargs, and git.
- [INDIRECT_PROMPT_INJECTION]: The skill describes how to analyze external shell scripts, which represents an ingestion surface for potentially malicious content embedded within files processed by the agent during linting tasks.
Audit Metadata