bash-pro
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to assist in writing and reviewing Bash scripts, which involves processing potentially untrusted code snippets. While the skill lacks explicit boundary markers for its internal processing of user scripts, it provides extensive instructions for the agent to implement sanitization, input validation, and defensive patterns (such as strict mode and safe argument parsing) in the generated output to mitigate injection vulnerabilities. The skill's primary capabilities include file system operations, process orchestration, and command execution through the shell scripts it helps create.
- [EXTERNAL_DOWNLOADS]: The skill references several well-known third-party tools and repositories for testing, linting, and documentation, including ShellCheck, bats-core, and shfmt hosted on GitHub. These references are documented for instructional purposes and point to established open-source projects.
Audit Metadata