PowerShell Clinic

Review a PowerShell script for Windows PowerShell pitfalls, or harden it. Paste the script: free in your browser, cmdlet calls next to -and / -or without parentheses, $null on the right of a comparison, .Count on a value that may be a single object, ConvertTo-Json without -Depth, no strict mode, try/catch that non-terminating errors skip, native commands with no $LASTEXITCODE check, paths built by concatenation or relative to the current directory, files written without -Encoding - and hardcoded credentials, plaintext SecureStrings, SQL built by interpolation, Invoke-Expression, execution-policy bypasses, certificate checks switched off, secrets written to output and unvalidated parameters. A metered run fixes the pitfalls or hardens the script; the page re-scans the result, checks every parameter and function is kept, nothing PowerShell 7-only lands in a 5.1 script, and every secret it reads is listed. Built on the SkillSafe skills @sickn33/powershell-windows and @josiahsiegel/powershell-security.