shell-scripting-bash-pro
Enhances Bash scripting for production automation and CI/CD with best practices for safety, portability, and testing.
Install this skill
Security score
The shell-scripting-bash-pro skill was audited on Feb 27, 2026 and we found 18 security issues across 2 threat categories, including 13 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 50 | - Validate inputs with `: "${VAR:?message}"` for required environment variables |
Template literal with variable interpolation in command context
| 55 | - Implement robust script directory detection: `SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P)"` |
Template literal with variable interpolation in command context
| 99 | - Validate environment variables before using: `: "${REQUIRED_VAR:?not set}"` |
Template literal with variable interpolation in command context
| 106 | - Use Bash built-ins over external commands: `[[ ]]` instead of `test`, `${var//pattern/replacement}` instead of `sed` |
Template literal with variable interpolation in command context
| 134 | - **Bash 5.0**: Associative array improvements, `${var@U}` uppercase conversion, `${var@L}` lowercase |
Template literal with variable interpolation in command context
| 135 | - **Bash 5.1**: Enhanced `${parameter@operator}` transformations, `compat` shopt options for compatibility |
Template literal with variable interpolation in command context
| 137 | - Check version before using modern features: `[[ ${BASH_VERSINFO[0]} -ge 5 && ${BASH_VERSINFO[1]} -ge 2 ]]` |
Template literal with variable interpolation in command context
| 138 | - Use `${parameter@Q}` for shell-quoted output (Bash 4.4+) |
Template literal with variable interpolation in command context
| 139 | - Use `${parameter@E}` for escape sequence expansion (Bash 4.4+) |
Template literal with variable interpolation in command context
| 140 | - Use `${parameter@P}` for prompt expansion (Bash 4.4+) |
Template literal with variable interpolation in command context
| 141 | - Use `${parameter@A}` for assignment format (Bash 4.4+) |
Template literal with variable interpolation in command context
| 272 | - **Parameter Expansion**: `${filename%.sh}` remove extension, `${path##*/}` basename, `${text//old/new}` replace all |
Template literal with variable interpolation in command context
| 275 | - **Co-processes**: `coproc proc { cmd; }; echo "data" >&"${proc[1]}"; read -u "${proc[0]}" result` for bidirectional pipes |
External URL reference
| 290 | - [Google Shell Style Guide](https://google.github.io/styleguide/shellguide.html) - Comprehensive style guide covering quoting, arrays, and when to use shell |
External URL reference
| 291 | - [Bash Pitfalls](https://mywiki.wooledge.org/BashPitfalls) - Catalog of common Bash mistakes and how to avoid them |
External URL reference
| 292 | - [Bash Hackers Wiki](https://wiki.bash-hackers.org/) - Comprehensive Bash documentation and advanced techniques |
External URL reference
| 293 | - [Defensive BASH Programming](https://www.kfirlavi.com/blog/2012/11/14/defensive-bash-programming/) - Modern defensive programming patterns |
External URL reference
| 301 | - [bashly](https://bashly.dannyb.co/) - Modern Bash CLI framework generator |