The excellent Shellcheck static analysis tool will save you from many of these potential pitfalls:

^-- SC2035: Use ./* so names with dashes won't become options.

http://www.shellcheck.net/about.html