Skills bash-linux
📦

bash-linux

Content revision r2 Medium Risk ⚙️ External commands🌐 Network access📁 Filesystem access

Build Safer Bash and Linux Workflows

Shell work often fails because commands, quoting, process handling, and error behavior vary by context. This skill provides practical Bash patterns for safer Linux and macOS terminal tasks.

Supports: Claude Codex Code(CC)
⚠️ 50 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "bash-linux" from https://skillstore.io/skills/sickn33-bash-linux.md and its manifest at https://skillstore.io/api/skills/sickn33-bash-linux/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "bash-linux". Find JavaScript files changed during the last day and summarize their locations.

Expected outcome:

A read-only workflow that narrows by file type and modification time, then groups results by directory.

Using "bash-linux". A local service cannot start because port 3000 is occupied.

Expected outcome:

  • Identify listening processes and confirm the expected user and command.
  • Attempt the service's normal shutdown method before sending a termination signal.
  • Use forced termination only after verification and failed graceful shutdown.

Using "bash-linux". Review a deployment script that sometimes continues after pipeline failures.

Expected outcome:

A focused review covering pipeline failure propagation, undefined variables, quoting, cleanup traps, and commands that need explicit error handling.

Security Audit

Medium Risk
v5 • 8/14/2026 Open versioned report

Most static alerts are false positives caused by Markdown formatting, illustrative shell syntax, reserved example URLs, and comparison headings. Confirmed concerns involve predictable shared temporary-file cleanup and guidance that may expose secrets or terminate unintended processes.

1
Files scanned
210
Lines analyzed
1
Review items
0
False positives ignored

Confirmed security concerns (3)

Medium
Environment Variable Disclosure Guidance
The skill recommends env or printenv without warning that full output can expose credentials and tokens in terminals, logs, or AI context.
The command explicitly prints the complete process environment, which commonly contains secrets. The surrounding text provides no redaction or scope warning.
Medium
Unvalidated Forced Process Termination
The process examples recommend SIGKILL and derive targets from a port without confirmation, graceful shutdown, or PID validation.
The documented commands explicitly use kill -9, including every PID returned for port 3000. No ownership or identity check is shown.
Medium
Shell Trace May Reveal Secrets
The error-handling section recommends set -x without warning that expanded commands can expose passwords, tokens, and sensitive arguments.
Bash tracing prints expanded command arguments, and the line presents tracing as a general debugging option without secret-handling safeguards.
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Temp directory access
rm -f /tmp/tempfile
The cleanup example deletes a fixed path in the shared /tmp directory. That predictable name can collide with another process or user's file.
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-bash-linux/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-bash-linux/security.svg)](https://skillstore.io/skills/sickn33-bash-linux?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-bash-linux?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-bash-linux/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-bash-linux.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). bash-linux security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-bash-linux/audits/5

BibTeX citation

@techreport{sickn33-sickn33-bash-linux-2026, author = {sickn33}, title = {bash-linux security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/sickn33-bash-linux/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "bash-linux security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-08-14" url: "https://skillstore.io/skills/sickn33-bash-linux/audits/5" identifiers: - type: other value: "skillstore:sickn33-bash-linux:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance

What You Can Build

Troubleshoot Local Development

Inspect logs, identify a port conflict, and choose cautious process-management steps for a local service.

Draft Reliable Automation

Structure a Bash script with strict error handling, clear logging, quoted variables, and cleanup behavior.

Translate Terminal Workflows

Map familiar PowerShell concepts to Bash commands while learning text-based pipeline behavior.

Try These Prompts

Find and Inspect Files
Show Bash commands to find [file pattern] under [directory], preview matches, and avoid modifying files.
Diagnose a Port Conflict
Help diagnose port [number] on [operating system]. Identify the process, verify ownership, and propose graceful shutdown before stronger actions.
Create a Robust Script
Draft a Bash workflow for [task] with strict mode, validated inputs, quoted variables, logging, and secure temporary-file cleanup.
Audit a Shell Script
Review [script path] for quoting, injection, secret exposure, cleanup, signal handling, portability, and failure behavior. Explain each recommended change.

Best Practices

  • Review command effects, paths, permissions, and target processes before execution.
  • Quote variable expansions and validate all external input before using it in commands.
  • Test scripts in a disposable environment before applying them to production systems.

Avoid

  • Do not paste commands into privileged shells without understanding every argument.
  • Do not print full environments or enable tracing when scripts handle secrets.
  • Do not use forced process termination before confirming identity and attempting graceful shutdown.

Frequently Asked Questions

Does this skill execute Bash commands?
No. It provides patterns and guidance. Your AI tool may execute commands only through its configured permissions and approval process.
Which operating systems are covered?
The examples target Bash on Linux and macOS. Tool availability and command options can differ between these systems.
Can I use the examples in production?
Review and test every command first. Add environment-specific validation, permissions checks, backups, and rollback steps.
Does the skill teach complete Bash scripting?
No. It is a compact pattern reference, not a complete language or system-administration course.
Why are some process commands risky?
Forced termination can interrupt writes or stop the wrong process. Verify ownership and prefer graceful shutdown.
How should secrets be handled?
Avoid full environment output and shell tracing. Print only required non-sensitive values and redact shared diagnostics.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

5a26d1d61d694db29af9b138c661c1981076d9df

Maintenance freshness

8/15/2026

Usage

13 downloads · 131 views

File structure

📄 SKILL.md