statusline-generator
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local commands such as jq, python3, awk, git, and ccusage to retrieve and format system and repository information for display in the statusline. These operations are performed locally using hardcoded arguments and are essential to the tool's primary functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill processes JSON data from standard input to extract workspace and model usage statistics.
- Ingestion points: Standard input in
scripts/generate_statusline.sh. - Boundary markers: None identified (processes raw JSON stream).
- Capability inventory: Local file reading (
.git/HEAD), local command execution (git,ccusage,jq,python3,awk), and writing debug information to/tmp/. - Sanitization: Uses structured parsing via
jqandpython3, which ensures that input data is treated as values rather than executable instructions.
Audit Metadata