skills/xfstudio/skills/bash-pro/Gen Agent Trust Hub

bash-pro

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides industry-standard guidance on defensive shell scripting, specifically advocating for strict error handling modes (set -Eeuo pipefail), proper error trapping, and secure temporary file management.
  • [SAFE]: It correctly identifies and warns against common security pitfalls, such as the use of eval on untrusted input, unquoted variable expansions, and unsafe command substitutions like for f in $(ls).
  • [SAFE]: The skill recommends the integration of well-known security and quality assurance tools, including ShellCheck for static analysis, Gitleaks and Trufflehog for secrets detection, and Bats-core for comprehensive testing.
  • [SAFE]: All external references and URLs point to reputable developer resources, including official Google style guides, well-known community wikis (Wooledge, Bash Hackers), and official GitHub repositories for established open-source tools.
  • [SAFE]: The provided code snippets and patterns align with modern best practices for Bash 4.4+ and 5.x, focusing on safety, portability, and input sanitization.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 10:27 AM
Security Audit — agent-trust-hub — bash-pro