Protects shell scripts from command injection vulnerabilities by validating user-provided input against dangerous patterns.
This skill provides a standardized pattern for securing shell scripts that accept user input, such as task descriptions or file paths. It implements specific validation checks to detect and reject dangerous patterns including newline injection, command substitution (backticks and $() syntax), and variable expansion (${}). By integrating these checks early in the script execution flow, developers can prevent malicious strings from being executed in subshells or external programs, ensuring robust security for automated environments and multi-user scripts.
主な機能
01Command injection prevention
02Detection of backticks and subshell syntax
030 GitHub stars
04Standardized error reporting integration
05Variable expansion protection
06Newline injection validation
ユースケース
01Hardening DevOps scripts that process dynamic user parameters
02Securing shell-based wrappers for CLI tools
03Validating task descriptions in automation scripts