This is a neat idea. I think you'd have to pass --random-source=/dev/urandom to shuf though in order to feel comfortable with this. However, what's the use case? Usually the correcthorsebatterystaple passwords are for memorizing, whereas folks generally use pass instead of memorizing.