Provide POSIX shell security guidance for safe quoting and input handling.
npx skills add https://github.com/scruffydan/AI-Agents --skill shell-security
Please help me install this Agent Skill. Skill: shell-security Source: https://github.com/scruffydan/AI-Agents/tree/main/source/skills/shell-security Command: npx skills add https://github.com/scruffydan/AI-Agents --skill shell-security
POSIX shell scripting often suffers from quoting errors, word splitting, and command-injection risks. This Skill provides practical guidance to write secure shell scripts across POSIX-compatible shells, reducing vulnerabilities and hard-to-trace bugs.
Review a shell script and apply the guidelines to fix unsafe quoting, improve input validation, and harden command execution.
High-intent search queries and answers about installing and using this skill.
Prevent command injection in POSIX shell scripts by enforcing safe quoting, validating user input, and avoiding unsafe eval execution during command construction and parameter substitution.
Handle word splitting and glob expansion in sh by using safe quoting practices for parameter handling, ensuring variables are properly enclosed to prevent unintended file pattern matching.
Yes, this shell security guidance works with dash and ash by providing portable scripting practices and secure file operations tailored for POSIX-compatible shells across system automation workflows.
Securely parse arguments in portable scripts by applying robust input handling techniques to avoid injections and path traversal, using built-in commands over external tools for safer execution.
Avoid using eval in system automation scripts when processing untrusted user input, as it introduces command injection risks; use secure command construction and parameter substitution instead.
Shell scripts fail from improper quoting across different shells due to word splitting and glob expansion; applying POSIX-compliant quoting and parameter handling prevents these hard-to-trace bugs.
Probably-GroupGenerate hardened Bash scripts with strict mode and secure command practices.
thoWrite or audit bash scripts for correctness, safety, and portability.
pproencaReview bash and POSIX shell scripts for security and portability issues.
gitgoodordietryingWrite portable POSIX-compatible shell scripts with argument parsing and error handling.
