skills.rest
kfolkes
kfolkesCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

shellcheck-security-scan

Scan shell scripts for security vulnerabilities and bugs using ShellCheck.

2|Updated Mar 11, 2026
Search Tags:#code review#bash#security scan#shellcheck#vulnerability detection#script analysis
One-click install
npx skills add https://github.com/kfolkes/dotnet-modernization-db-transform --skill shellcheck-security-scan-kfolkes
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: shellcheck-security-scan
Source: https://github.com/kfolkes/dotnet-modernization-db-transform/tree/main/sec-check/.github/skills/shellcheck-security-scan
Command: npx skills add https://github.com/kfolkes/dotnet-modernization-db-transform --skill shellcheck-security-scan-kfolkes

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automatically scans shell scripts for security vulnerabilities, bugs, and dangerous patterns, helping to prevent common exploits and ensure script reliability.

Core Features & Use Cases

  • Security Vulnerability Detection: Identifies risks like command injection, arbitrary code execution, and unsafe variable expansions.
  • Bug Detection: Catches common scripting errors and potential logic flaws.
  • Use Case: Before deploying a new CI/CD pipeline script, use this Skill to scan it for any security weaknesses that could be exploited.

Quick Start

Scan the file 'deploy.sh' for security vulnerabilities.

Frequently Asked Questions about shellcheck-security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan shell scripts for security vulnerabilities and command injection risks?▼

Scanning shell scripts for security vulnerabilities detects command injection, arbitrary code execution, and unsafe variable expansions using ShellCheck static analysis to prevent common exploits and ensure reliability.

Can I check Dockerfiles and Makefiles for unsafe shell patterns?▼

Yes, you can check Dockerfiles and Makefiles for unsafe shell patterns. The analysis applies to standalone scripts, CI/CD pipelines, and these build files to catch dangerous scripting logic and potential flaws.

Do I need ShellCheck installed to analyze bash scripts for bugs?▼

Yes, you need ShellCheck installed and configured. The Skill requires the ShellCheck tool to be present in your environment to perform static analysis and detect scripting errors and security weaknesses.

What's the best way to secure a CI/CD pipeline script before deployment?▼

The best way to secure a CI/CD pipeline script is running static analysis before deployment to identify security weaknesses, unsafe variable expansions, and logic flaws that could be exploited in production.

What types of unsafe variable expansions can static analysis detect in bash scripts?▼

Static analysis detects unsafe variable expansions, command injection risks, and arbitrary code execution paths in bash scripts. It catches common scripting errors and dangerous patterns to prevent exploitation.

Related Skills

Explore More Software Engineering Skills→
pantheon-orgpantheon-org
9

bash-script-validator

Validate bash and shell scripts for syntax errors and security vulnerabilities.

Official
Intermediate
SuperCorksSuperCorks

security-guidance

Audit codebases for XSS, injection, and unsafe data flows.

Community
Basic
GrizzwaldHouseGrizzwaldHouse
6

Workflow Productivity

Automate repetitive development tasks with scripts, CI/CD pipelines, and bulk file operations.

Community
Intermediate
LuisSambranoLuisSambrano
7

code-review

Perform systematic code review and static analysis across multiple programming languages.

Community
Advanced