Can this skill help with Bash script security?

Yes, it specifically checks for safety patterns such as unquoted variables and missing error-handling flags that could lead to security vulnerabilities or unexpected behavior during execution.

Is this skill suitable for auditing CI/CD pipelines?

Absolutely. It is optimized for CI/CD scripts, Git hooks, and build automation where reliable exit code propagation is critical for pipeline success or failure.

Does it support POSIX compliance checks?

Yes, the skill includes a portability module designed to ensure your scripts work across different shell environments and platforms by identifying non-standard syntax.

How does it detect masked failures?

It audits scripts for patterns like 'cmd | grep' where the exit code of the primary command might be lost, recommending fixes like pipefail or separate capture patterns.

Shell Script Audit & Review

Name: Shell Script Audit & Review
Author: athola

byathola

•

123

•

Security & Testing

Audits shell and Bash scripts for correctness, safety, and cross-platform portability to ensure reliable automation.

Shell Script Review is a specialized Claude Code skill designed to identify common pitfalls, security vulnerabilities, and portability issues within automation scripts. It systematically analyzes exit code propagation, shell-specific behaviors, and safety patterns—such as variable quoting and set flags—to ensure scripts run reliably across different environments. This tool is essential for developers and DevOps engineers maintaining CI/CD pipelines, Git hooks, and deployment wrappers where silent failures or environment mismatches can lead to critical production issues.

Key Features

01123 GitHub stars

02Detailed evidence logging with file-specific line references and fix actions

03Cross-platform portability checks for POSIX compliance and shell consistency

04Safety pattern verification including proper variable quoting and error flags

05Automated exit code auditing to prevent masked failures in pipelines

06Context-aware analysis of CI/CD, Git hooks, and build automation scripts

Use Cases

01Validating build automation scripts for security and best practices before deployment

02Reviewing CI/CD pipeline scripts to ensure reliable failure detection

03Auditing Git pre-commit hooks and wrapper scripts for cross-environment safety

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add athola/claude-night-market shell-review

For use in Claude.ai and ChatGPT

Download Skill