What makes a shell script idempotent?

An idempotent script is designed so that it can be executed multiple times without changing the result beyond the initial application, often by checking the current state of a resource (like a directory or config file) before attempting to modify it.

Why is variable quoting emphasized in defensive scripting?

Quoting variables (e.g., "$VAR") is critical to prevent word splitting and globbing, which are common sources of bugs and security vulnerabilities when scripts process filenames or inputs containing spaces and special characters.

How does this skill improve CI/CD pipelines?

It provides standardized patterns for idempotency and error trapping, ensuring that deployment scripts fail safely, provide clear logs, and clean up temporary resources when interrupted.

What is Bash strict mode?

Bash strict mode is a configuration set (set -Eeuo pipefail) that causes scripts to exit immediately upon encountering errors, undefined variables, or failures within a pipeline, preventing silent failures and unpredictable behavior.

Defensive Bash Scripting

Name: Defensive Bash Scripting
Author: HermeticOrmus

byHermeticOrmus

0•

Deployment & DevOps

Implements production-grade defensive programming patterns for robust, error-resilient Bash shell scripts and automation.

This skill provides a comprehensive framework for writing reliable, production-ready Bash scripts by applying defensive programming principles. It covers essential safety measures including strict mode initialization, robust error trapping, secure variable handling, and advanced orchestration patterns like idempotency and atomic file operations. It is designed for developers building mission-critical CI/CD pipelines, system utilities, and deployment automations where script reliability and fault tolerance are paramount.

Key Features

01Strict mode configuration for immediate error detection and pipe failure handling

02Comprehensive error trapping and automated resource cleanup routines

03Robust CLI argument parsing and structured multi-level logging

04Idempotent design patterns for safe, repeatable script execution

050 GitHub stars

06Safe variable and array manipulation patterns to prevent word splitting and globbing

Use Cases

01Creating maintainable and portable shell script libraries for cross-platform use

02Developing system administration utilities that must handle edge cases safely

03Building mission-critical CI/CD deployment pipelines that require high reliability

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add hermeticormus/floraheritage bash-defensive-patterns

For use in Claude.ai and ChatGPT

Download Skill