Scripting Utils

Universal scripting utilities supporting 8+ languages (Bash, PowerShell, Python, Perl/Raku, JavaScript, Tcl), IRC bot frameworks (pbot, Limnoria), system man...

Security Scan

The skill's description and runtime instructions claim a lot of external tooling and a WebSearch capability, but the package metadata and manifest are inconsistent about required binaries/dependencies and how it will be installed and run.

Purpose & Capability

SKILL.md describes syntax validation and linting across many languages (shellcheck, pylint/mypy, perlcritic, eslint, pwsh/PSScriptAnalyzer, raku, node, tcl) and WebSearch-driven documentation fetches. The skill's registry metadata lists no required binaries or credentials — this is inconsistent because the described functionality requires many external tools (shellcheck, node, python tooling, pwsh, raku, etc.) and likely network access. The package.json also lists a relative dependency ("../json-utils") which is not a normal published dependency and appears to assume a particular repository layout.

Instruction Scope

The SKILL.md instructs the agent to validate scripts, fetch documentation from web sources (e.g., Microsoft docs, GitHub) and to perform batch validation and schema-based JSON validation. Those actions imply network access and the ability to read local files/directories (batch validation, schema files like github_api_schema.json). The instructions do not explicitly limit which local files or system state to read, nor do they document what WebSearch endpoints or rate limits are used. That gives the skill broad discretion unless the implementation imposes constraints.

Install Mechanism

There is no install spec (instruction-only), but the bundle contains code files and package.json. package.json sets "main": "SKILL.md" and a dependency "../json-utils" (a relative path) — this is atypical and will fail in standard package installs. The absence of an install mechanism for dependencies and native tools (e.g., shellcheck, pylint) is inconsistent with the skill's claimed runtime needs.

Credentials

The skill requests no environment variables or credentials in metadata, which is proportionate for general linting; however, its WebSearch and API-validation features imply network calls but no declared API keys or endpoints. The unexplained relative dependency on ../json-utils suggests it expects local repository layout or shared credentials/config outside the skill manifest.

Persistence & Privilege

The skill does not request always: true and uses default model-invocation settings. It does not declare config paths or persistent privileges. No indicators that it will alter other skills or system-wide settings.

What to consider before installing

This skill has useful-sounding functionality, but the bundle is internally inconsistent and may not work as-is. Before installing: (1) ask the author how external tools are provided (shellcheck, pylint, eslint, pwsh, raku, node) and whether the runtime will install or require them on PATH; (2) ask how WebSearch is implemented (which endpoints, whether it uses an API key, and where fetched data is sent/stored); (3) verify the relative dependency "../json-utils" — confirm that dependency will be available or published; (4) review the actual script source (scripts/*.py) for any hard-coded remote endpoints or credential access; and (5) prefer a skill with a proper install spec or a published dependency chain and a homepage/maintainer contact. If you must try it, run in a restricted/sandboxed environment and inspect network activity and what local files it reads/writes.

Universal scripting utilities with WebSearch integration for 8+ languages and IRC bot frameworks.

Supported Languages

Language	Command	Validation	Linting	WebSearch Docs
Bash	bash	✅ shellcheck	✅	✅
sh (POSIX)	sh	✅ shellcheck	✅	✅
Python	python3	✅ pylint/mypy	✅	✅
Perl 5	perl	✅ perlcritic	✅	✅
Raku	raku	✅	✅	✅
PowerShell	pwsh	✅ PSScriptAnalyzer	✅	✅
JavaScript	node	✅ eslint	✅	✅
Tcl	tclsh	✅	✅	✅

IRC Bot Frameworks

Framework	Language	Docs Source	Status
pbot	Perl 5	https://github.com/pragma-/pbot	✅
Limnoria	Python	https://docs.limnoria.net/	✅
Eggdrop	Tcl	https://docs.eggheads.org/	✅

System Management

System	Ubuntu	CentOS 8	Command Matrix
systemd	✅	✅	✅
packages (apt/yum)	✅	✅	✅
services	✅	✅	✅
networking	✅	✅	✅

WebSearch Integration

All modules support automatic documentation lookup:

from scripting_utils import LanguageValidator

validator = LanguageValidator("powershell")
# Auto-fetches syntax from Microsoft docs if needed
result = validator.validate("$var = Get-Process")

Modules

Module	Purpose
language_validator.py	Multi-language syntax validation
irc_bot_syntax.py	pbot, Limnoria, Eggdrop command syntax
system_manager.py	systemd, Ubuntu/CentOS abstraction
json_websearch.py	JSON-Utils + WebSearch combination
script_converter.py	Cross-language script conversion
batch_validator.py	Batch validation of script directories

Quick Start

Validate a script:

python scripts/language_validator.py script.ps1 --lang powershell
python scripts/language_validator.py script.pl --lang perl

Get IRC bot command syntax:

python scripts/irc_bot_syntax.py --bot pbot --command "keyword add"
python scripts/irc_bot_syntax.py --bot limnoria --command "config channel"

System command (Ubuntu vs CentOS):

python scripts/system_manager.py --action install --package nginx --os ubuntu
python scripts/system_manager.py --action install --package nginx --os centos

JSON from WebSearch + Validate:

from json_websearch import validate_search_result
from scripting_utils import WebSearchJSON

# Search API docs, validate response
result = WebSearchJSON.search_and_validate(
    query="github api repos endpoint",
    schema="github_api_schema.json"
)

Integration with json-utils

The json_websearch.py module extends json-utils with WebSearch capabilities:

• Fetch API schemas from documentation
• Validate real API responses
• Batch-validate multiple endpoints
• Auto-repair common API response errors

See: ../json-utils/ for core JSON functionality.