sh Tool — Analyze POSIX Shell Scripts Online
A no-install sh tool for reviewing POSIX shell scripts. Paste and get a portability + safety audit in about two minutes.
Portability audit
#!/bin/sh
# The sh tool checks this shebang against every construct below:
run() { local x=$1; ... } # sh: `local` is not POSIX
source ./helpers.sh # sh: `source` is Bash; use `.` for POSIX
What the sh tool inspects
POSIX portability, quoting, error handling, security patterns (unsafe eval, command injection, unvetted remote exec), and general script quality — all in one paste.
Why an sh tool over an editor plugin?
Editor plugins live where you write. A browser tool lives where you review — pasted diffs, PR snippets, gists, incident postmortems. Both have their place.
Exports and integrations
PDF, Markdown, or JSON export. JSON is designed for CI ingestion — pipe it into your existing dashboard.
Frequently asked questions
- Is the sh tool free?
- Yes. Free for interactive use, no signup.
- What POSIX shells does it target?
- dash, ash, and bash --posix. Bashisms flagged accordingly.
- Can I use it in CI?
- For CI, prefer running ShellCheck locally in the pipeline. This tool is best for the interactive review step.