Validate and sanitize Bash scripts for iDumb security vulnerabilities.
npx skills add https://github.com/shynlee04/idumb-plugin --skill idumb-security
Please help me install this Agent Skill. Skill: idumb-security Source: https://github.com/shynlee04/idumb-plugin/tree/main/src/skills/idumb-security Command: npx skills add https://github.com/shynlee04/idumb-plugin --skill idumb-security
Secure and validate Bash scripts used by iDumb to prevent security vulnerabilities, enforce path safety, and control agent permissions before actions are executed.
Install and activate the iDumb security skill in your project, then run a pre-write scan to validate your bash scripts.
High-intent search queries and answers about installing and using this skill.
Path sanitization normalizes and restricts file paths to stay within project scope. It prevents directory traversal by validating paths against defined boundaries before any file operations execute, ensuring agents cannot access files outside permitted directories.
Permission enforcement validates agent permissions against a governance matrix to prevent privilege escalation. It checks requested actions against allowed scopes before execution, blocking unauthorized operations and ensuring agents operate only within their assigned permission levels.
Atomic file operations provide safe write patterns that prevent concurrent modification issues. By implementing atomic writes, file operations either complete fully or fail without partial writes, eliminating race conditions during concurrent agent access.
Run pre-write validation whenever creating or updating components that involve Bash scripts. It applies across all agents during pre-write and pre-delegate phases to enforce path sanitization, permission checks, and race-condition prevention before any code is written or delegated.
Path sanitization normalizes and restricts file paths to stay within project scope. Scripts attempting to access paths outside defined project boundaries are flagged and blocked, preventing unauthorized file access beyond the permitted directory structure.
rauly-1408Enforce runtime permission boundaries for AI agent tool, file, command, and network operations.
fatihkanDetects race condition vulnerabilities in concurrent processing across databases, file systems, and in-memory counters.
pantheon-orgValidate bash and shell scripts for syntax errors and security vulnerabilities.
JFrangelDetects and remediates security vulnerabilities in code, infrastructure, and architecture using OWASP and DevSecOps standards for pre-production environments.
