Not sure if $taboo was getting sanitized or not. Possibly an SQL injection vulnerability that allows maliciously crafted group names to inject SQL at a later date when the group CP is loaded. Unconfirmed, theoretical fix.

#!/bin/bash
for f in *.svg; do
    echo Converting $f
    fname=`echo $f | cut -d '.' -f 1`
    rm -f $fname.png
    inkscape -z -f $f -w 22 -h 22 -e ./$fname.png
done