Shell Scripting

• Risk level: Low
• Analyzed: May 1, 2026, 5:18 AM
• Findings: 1
• Version: 1.0.0

Overview

This is an instruction-only shell scripting guide with no install code or credential use, though users should review generated shell commands before running them.

This skill appears safe to install as an instruction-only shell scripting helper. Treat its output like any generated shell script: read it first, understand file deletion or network commands, and test with harmless inputs before using it on important data.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

Low

What this means

If a user runs generated shell scripts without checking them, commands could modify files, contact networks, or process large sets of local data.

Why it was flagged

The skill documents raw shell and parallel-execution patterns. This is expected for a shell-scripting skill, but generated or copied commands can affect many files if run without review.

Skill content

find . -name "*.jpg" | xargs -P 8 -I {} sh -c 'convert {} -resize 800x600 resized/{} && echo "Done: {}"'

Recommendation

Review generated scripts before execution, especially commands that delete files, run in parallel, use network tools, or interpolate filenames into shell commands.