Shell and Bash checks

ShellCheck

Runs ShellCheck against bounded script snapshots without executing scripts or following external sources. Reports errors, warnings and informational diagnostics with exact file and line evidence. Preserves shebang dialects and inline suppressions. Excludes style diagnostics and unresolved-source notices.

Model review

Reviews concrete operational defects beyond static linting:

• Destructive operations after failed directory changes or with unsafe paths.
• Lost command, pipeline, substitution and function exit statuses, including conditional calls that disable errexit.
• Injection through eval, commands and arguments.
• Unsafe temporary files, traps, cleanup and signal handling.
• Subshell state, concurrency and portability defects.

Each observation must cite supplied source and explain a concrete triggering execution path, impact and correction. Generic strict-mode and style requests are excluded. Changed scans require authoritative changed-line ranges.

Coverage

Scans .sh and .bash files. ShellCheck is required in the runner; model review uses the normal Doomer broker. Missing tools and bounded or skipped source produce explicit incomplete-coverage notes. Extensionless scripts and embedded shell are outside this version.