Can this skill help with Bash script security?

Yes, it specifically checks for safety patterns such as unquoted variables and missing error-handling flags that could lead to security vulnerabilities or unexpected behavior during execution.

Is this skill suitable for auditing CI/CD pipelines?

Absolutely. It is optimized for CI/CD scripts, Git hooks, and build automation where reliable exit code propagation is critical for pipeline success or failure.

Does it support POSIX compliance checks?

Yes, the skill includes a portability module designed to ensure your scripts work across different shell environments and platforms by identifying non-standard syntax.

How does it detect masked failures?

It audits scripts for patterns like 'cmd | grep' where the exit code of the primary command might be lost, recommending fixes like pipefail or separate capture patterns.

Shell Script Audit & Review

Name: Shell Script Audit & Review
Author: athola

byathola

•

123

安全与测试

Audits shell and Bash scripts for correctness, safety, and cross-platform portability to ensure reliable automation.

关于

Shell Script Review is a specialized Claude Code skill designed to identify common pitfalls, security vulnerabilities, and portability issues within automation scripts. It systematically analyzes exit code propagation, shell-specific behaviors, and safety patterns—such as variable quoting and set flags—to ensure scripts run reliably across different environments. This tool is essential for developers and DevOps engineers maintaining CI/CD pipelines, Git hooks, and deployment wrappers where silent failures or environment mismatches can lead to critical production issues.

主要功能

123 GitHub stars
Detailed evidence logging with file-specific line references and fix actions
Cross-platform portability checks for POSIX compliance and shell consistency
Safety pattern verification including proper variable quoting and error flags
Automated exit code auditing to prevent masked failures in pipelines
Context-aware analysis of CI/CD, Git hooks, and build automation scripts

使用场景

Validating build automation scripts for security and best practices before deployment
Reviewing CI/CD pipeline scripts to ensure reliable failure detection
Auditing Git pre-commit hooks and wrapper scripts for cross-environment safety

关于

主要功能

123 GitHub stars
Detailed evidence logging with file-specific line references and fix actions
Cross-platform portability checks for POSIX compliance and shell consistency
Safety pattern verification including proper variable quoting and error flags
Automated exit code auditing to prevent masked failures in pipelines
Context-aware analysis of CI/CD, Git hooks, and build automation scripts

使用场景

Validating build automation scripts for security and best practices before deployment
Reviewing CI/CD pipeline scripts to ensure reliable failure detection
Auditing Git pre-commit hooks and wrapper scripts for cross-environment safety