deepline-gtm

This module is primarily a terminal UI/status generator, but it includes a high-risk arbitrary command execution feature: it reads ~/.claude/statusline-user-command.txt and executes its contents via execSync, then prints the command’s stdout. If that file is attacker-influenced (or the home directory is compromised), this enables straightforward host compromise and data exfiltration via the executed command. Additionally, transcript_path from stdin allows reading arbitrary local files accessible to the user (for display/state purposes). There are no clear network or eval-like behaviors in the shown code, but the execSync sink substantially elevates supply-chain/security risk.