Bash Defensive Patterns

Use this skill when the user needs Bash guidance that is safe enough for CI, automation, and operational scripting.

Load References

• Read references/defensive-bash-checklist.md for a quick review pass over Bash safety basics.
• Read references/risky-operations-checklist.md when the script can modify systems, files, deployments, or other production state.

Core Priorities

1. Quote expansions correctly and avoid unsafe word splitting.
2. Validate inputs, environment variables, and external dependencies early.
3. Use traps and cleanup logic for temporary files and partial failure paths.
4. Prefer idempotent operations and dry-run support for risky scripts.
5. Add linting and lightweight test coverage before relying on the script operationally.

What To Review

• Use of set -Eeuo pipefail and whether the script can handle it safely
• Quoting of variables, array usage, and iteration safety