56 results available
Sign in
Skills directory

shellcheck-configuration

wshobson

·

Last changed
Hardened

This skill has been hardened by Chainguard

Last changed

This version passed the hardening gate. Hardening applied 5 targeted changes and preserved all other text. Classified findings before hardening: 7. Classified findings closed: 4. Classified findings remaining: 3. Unclassified scanner findings remaining: 0. Review findings closed: 4. Review findings remaining: 8.

Open before hardening

1

High

2

Medium

4

Low
Open after hardening

3

Low
Expand
File
Group
Subtype
Severity
Status
references/details.md

Tool & MCP Manipulation

Unauthorized tool use

High
Closed
references/details.md

Excessive Agency & Rogue Autonomy

—

Medium
Closed
references/details.md

Privilege Escalation & Host / Cloud Compromise

Privilege escalation

Medium
Closed
references/details.md

Malicious Code & Command Execution

—

Low
Open
references/details.md

Supply Chain & Install-Time Trust

Dependency or plugin compromise

Low
Closed
references/details.md

Malicious Code & Command Execution

Command injection

Low
Open
references/details.md

Supply Chain & Install-Time Trust

Install-time download and execute

Low
Open

7 findings

SKILL.md

ShellCheck Configuration and Static Analysis

Comprehensive guidance for configuring and using ShellCheck to improve shell script quality, catch common pitfalls, and enforce best practices through static code analysis.

When to Use This Skill

  • Setting up linting for shell scripts in CI/CD pipelines
  • Analyzing existing shell scripts for issues
  • Understanding ShellCheck error codes and warnings
  • Configuring ShellCheck for specific project requirements
  • Integrating ShellCheck into development workflows
  • Suppressing false positives and configuring rule sets
  • Enforcing consistent code quality standards
  • Migrating scripts to meet quality gates

Detailed patterns and worked examples

Detailed pattern documentation lives in references/details.md. Read that file.

Best Practices

  1. Run ShellCheck in CI/CD - Catch issues before merging
  2. Configure for your target shell - Don't analyze bash as sh
  3. Document exclusions - Explain why violations are suppressed
  4. Address violations - Don't just disable warnings
  5. Enable strict mode - Use --enable=all with careful exclusions
  6. Update regularly - Keep ShellCheck current for new checks
  7. Use pre-commit hooks - Catch issues locally before pushing
  8. Integrate with editors - Get real-time feedback during development

Install

Install with chainctl
chainctl skill install public/wshobson/shellcheck-configuration:latest
Get started with chainctl
View source

Harden your own skills

Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.

Provenance

Upstream sourcehttps://github.com/wshobson/agents
Upstream commitbe57c0b2e3c05c528ca6132b87410b385718775f
OCI reference

skills.cgr.dev/public/github.com/wshobson/plugins/shell-scripting/skills/shellcheck-configuration:latest

License

MIT

Files

HARDENING.md

LICENSE

SKILL.md

references/details.md

The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing

Solutions

FedRAMPPCI DSSCMMC 2.0SOC 2Golden ImagesCVE RemediationPublic SectorStartups

Customers

Customer StoriesChainguard Reviews

Resources

Events & WebinarsSupply Chain Security 101Chainguard CoursesDocumentationTrust CenterChainguard Slack Community

Company

About UsBlogOpen Source LeadershipPartnersNewsroomCareersLegal
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.