Shell Review

What it does

When your agent uses it

• Reviewing shell scripts
• Before committing shell changes

Example prompts

• “Use the shell-review skill to audit shell scripts for correctness, portability, and common pitfalls”
• “/shell-review”

Workflow steps

6 steps, taken from the step headings in SKILL.md.

1. 1Map Context (shell-review:context-mapped)
2. 2Exit Code Audit (shell-review:exit-codes-checked)
3. 3Portability Check (shell-review:portability-checked)
4. 4Safety Patterns (shell-review:safety-patterns-verified)
5. 5Structure Patterns (shell-review:structure-checked)
6. 6Evidence Log (shell-review:evidence-logged)

What it can do on your machine

Read from SKILL.md and the folder at commit 9f3eb00. It shows what the files ask for, not the result of running them.

• Tool permissions

  Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

  From allowed-tools in the SKILL.md frontmatter.

• Runs code

  Shell commands in SKILL.md call:

  • rg
  • shellcheck
  • pytest

  From the folder's file list and the shell code blocks in SKILL.md.

• Network

  No URLs in SKILL.md.

  From URLs in SKILL.md, links to its own repository left out.

• Credentials

  Names no API keys, tokens, secrets or passwords.

  From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Shell Review loads about 1.1k tokens when it runs. Until then it costs about 38 tokens; SKILL.md has 264 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it

~38

When it runs · the whole SKILL.md, loaded when a task matches

~1.1k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from athola/claude-night-market at commit 9f3eb00, republished under its MIT licence (© athola). 264 words, ~1,071 tokens.

name

shell-review

description

Audits shell scripts for correctness, portability, and common pitfalls. Use when reviewing shell scripts or before committing shell changes.

globs

**/*.sh

alwaysApply

false Use when reviewing shell scripts, CI scripts, hook scripts, wrapper scripts. Do not use when creating new scripts - use attune:workflow-setup.

category

build

tags

shell, bash, posix, scripting, ci, hooks

complexity

intermediate

model_hint

standard

estimated_tokens

200

progressive_loading

true

dependencies

imbue:proof-of-work, imbue:review-core, imbue:structured-output

modules

modules/exit-codes.md, modules/portability.md, modules/safety-patterns.md, modules/structure-patterns.md

/shell-review path/to/script.sh

# Find shell scripts
find . -not -path "*/.venv/*" -not -path "*/__pycache__/*" \
  -not -path "*/node_modules/*" -not -path "*/.git/*" \
  -name "*.sh" -type f | head -20
# Check shebangs
rg -l "^#!/" scripts/ hooks/ 2>/dev/null | head -10
# fallback: grep -l "^#!/" scripts/ hooks/ 2>/dev/null | head -10

## Summary
Shell script review findings

## Scripts Reviewed
- [list with line counts]

## Exit Code Issues
### [E1] Pipeline masks failure
- Location: script.sh:42
- Anchor: `verbatim source text at file:line`
- Pattern: `cmd | grep` loses exit code
- Fix: Use pipefail or capture separately

## Portability Issues
[cross-platform concerns]

## Safety Issues
[unquoted variables, missing set flags]

## Recommendation
Approve / Approve with actions / Block

© athola, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 4 other files in plugins/pensive/skills/shell-review of athola/claude-night-market.

• SKILL.md
• modules/exit-codes.md
• modules/portability.md
• modules/safety-patterns.md
• modules/structure-patterns.md

Open the folder on GitHubat commit 9f3eb00