bash-pro
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides industry-standard guidance on defensive shell scripting, specifically advocating for strict error handling modes (
set -Eeuo pipefail), proper error trapping, and secure temporary file management. - [SAFE]: It correctly identifies and warns against common security pitfalls, such as the use of
evalon untrusted input, unquoted variable expansions, and unsafe command substitutions likefor f in $(ls). - [SAFE]: The skill recommends the integration of well-known security and quality assurance tools, including ShellCheck for static analysis, Gitleaks and Trufflehog for secrets detection, and Bats-core for comprehensive testing.
- [SAFE]: All external references and URLs point to reputable developer resources, including official Google style guides, well-known community wikis (Wooledge, Bash Hackers), and official GitHub repositories for established open-source tools.
- [SAFE]: The provided code snippets and patterns align with modern best practices for Bash 4.4+ and 5.x, focusing on safety, portability, and input sanitization.
Audit Metadata