shell-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational documentation and script templates focusing on secure and portable shell scripting practices.
- [SAFE]: Promotes the use of strict mode (
set -euo pipefail) to ensure scripts fail predictably on errors or unset variables. - [SAFE]: Emphasizes mandatory variable quoting and the use of modern test syntax (
[[ ]]) to prevent common logic and injection vulnerabilities. - [SAFE]: Provides specific remediation guidance for common security risks, including input sanitization using regex and safe command building using arrays instead of string concatenation.
- [SAFE]: Includes secure implementation examples for temporary file management using
mktempand signal trapping for automatic cleanup.
Audit Metadata