terminal-title

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local shell script (scripts/set_title.sh) to update the terminal window title.
  • The script includes explicit input validation and sanitization using tr to remove control characters (0x00-0x1F) and head to limit title length to 80 characters, which effectively mitigates terminal escape sequence injection attacks.
  • It writes the title to a local state file (~/.claude/terminal_title) using an atomic write pattern (temp file + rename) to avoid race conditions.
  • The use of basename "$PWD" and environment variables for prefixing is handled safely within the script.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 03:13 PM
Security Audit — agent-trust-hub — terminal-title