Bash · Review & Verify
Review & Verify Bash
How generated code fails in this language, and the checks that catch it before your users do.
Know the failure modes
01
The shell mistakes language models actually make
Generated shell is usually correct on the happy path and dangerous on every other one. Almost all of it is caught by one tool.
02
What your script depends on, when there is no package manager
A shell script's dependencies are every external command it calls, every flag it assumes, and every installer it pipes into a shell. None of that is declared anywhere.
03
Security review checklist for generated shell scripts
Shell has no sandbox, no type system and no undo. Every variable is a potential injection point and every script runs with your full privileges.
04
The performance traps in generated shell scripts
Shell performance is almost entirely about how many processes you start. Generated scripts start a great many, and the fix is usually to delete code rather than add it.
Get the Bash agent pack
A battle-tested AGENTS.md, the review checklist, and the failure-mode cheat sheet for Bash. One email, then occasional updates when the tooling shifts. No course pitch.
AGENTS.md now — no email needed.