lov-better-statusline
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes and modifies status bar configurations for external applications.
- Ingestion points: Reads existing status line configurations from target project files (e.g., Claude Code configuration).
- Boundary markers: The workflow in SKILL.md specifies defining explicit input and reading back results to verify the state.
- Capability inventory: Uses shell commands to modify configuration files and Git for version control and backup.
- Sanitization: The skill includes a step to verify the current official protocol and configuration schema before applying changes.
- [COMMAND_EXECUTION]: The skill executes local Python scripts to manage user preferences and records.
- Evidence:
scripts/profile_store.pyis invoked to read and record user-stated values for brand and workspace identity. - Control: The script includes a security check
SENSITIVE_PARTSto prevent writing or reading sensitive information like API keys, tokens, or passwords.
Audit Metadata