Shell Clinic — defensive review of your shell script

Paste your Bash script (and optionally its helper files) and get a senior infrastructure engineer's defensive review: a production-readiness posture, the inventory of every file and function, prioritized findings with corrected shell fragments, a reconciliation of the free client-side prescan, quick wins and focus areas. The instant prescan (strict mode, unguarded rm -rf, curl piped to sh, backticks, unquoted $@, read without -r, fixed /tmp paths, missing traps, literal secrets and more) runs free in the browser. Derived from @wshobson/bash-defensive-patterns (MIT).

Every public app is built from a security-scanned skill and must pass a clean scan — skill and frontend — before it can be listed. Have a skill of your own? Turn it into an app — or read the step-by-step walkthrough.