“Use shellcheck. Heed its warnings.”
Use bash, set errexit and nounset, and run shellcheck. That covers most of the list. The rest is habit: name things clearly and don’t get clever. Every shell script outage starts as a five-line hack someone was too busy to clean up. Turning on errexit takes one line.