Check My Shell Script — Instant Static Audit
Paste any shell script — Bash or POSIX sh — and get an instant static audit. Every issue is line-anchored, severity-graded, and paired with a suggested fix.
Example audit request
# You paste:
#!/bin/bash
foo() { echo $1; }
foo "$USER_INPUT"
# Checker returns:
# medium line 2: unquoted `$1` — will word-split; use "$1"
# high line 3: echoing untrusted input can leak escape sequences to terminals
What "checked" gets you
A risk score, an executive summary, and 12 grouped sections of findings — every finding with a severity, a line, a description, and a suggested rewrite.
Bash or sh — no config needed
The shebang controls the checker. Bash scripts get Bash rules. POSIX sh scripts get POSIX rules with bashism warnings.
From audit to fix
Every finding is actionable. Use the "Generate fixed script" action for a proposed rewrite you can diff against the original.
Frequently asked questions
- How long does the check take?
- Typically 60–120 seconds. Repeated checks of the same script return instantly.
- Is my script private?
- Yes. Not stored server-side, not logged, not used for training.
- What script size is supported?
- Up to 1 MB / 25,000 lines.