bash-pro
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill documents defensive programming patterns such as strict mode (set -Eeuo pipefail), proper quoting, and input validation to prevent common shell vulnerabilities.
- [EXTERNAL_DOWNLOADS]: It recommends standard security tools for static analysis (ShellCheck), formatting (shfmt), and secrets detection (gitleaks, trufflehog) from well-known community repositories.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes user-supplied scripts (an ingestion surface for untrusted data), it includes explicit instructions to treat all input as untrusted and specifically warns against dangerous patterns like the use of eval on external input.
Audit Metadata