bash-script-validator

Automate Bash script validation by running syntax checks with bash -n, ShellCheck static analysis, and custom security pattern detection to produce structured reports for CI pipelines. This enforces script quality and reliability before merge or deployment.

Yes, you can validate POSIX shell scripts alongside Bash. The skill performs multi-shell validation using sh -n for POSIX syntax checking and runs ShellCheck to catch portability issues and unsafe patterns across both shell types.

Custom security checks for shell script linting detect unsafe constructs like eval, useless cat, improper quoting, and missing strict mode. These checks surface specific vulnerabilities and quality issues beyond standard syntax validation.

Shell script validation integrates with either a system-installed ShellCheck or a wrapper, surfacing warnings with clear guidance. It executes deterministically within its own scripts directory to ensure reproducible results without requiring a specific environment setup.

The best way to catch unsafe patterns in shell scripts is to combine syntax validation and static analysis. Running automated checks for syntax errors, ShellCheck warnings, and custom security patterns prevents subtle mistakes from slipping into production.