moonpay-wallet-statusline-refresh
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes a local bash script located at
~/.config/moonpay/refresh-statusline.sh. This script is intended to update the status line configuration for the MoonPay wallet service. - [EXTERNAL_DOWNLOADS]: Mentions the requirement for the
@moonpay/clipackage, which is a resource provided by the vendor. - [INDIRECT_PROMPT_INJECTION]: The skill processes and displays the content of
~/.config/moonpay/statusline-cache.txtto the user. - Ingestion points: The agent reads data from
~/.config/moonpay/statusline-cache.txt(SKILL.md). - Boundary markers: None present; the content is piped through
sedand displayed directly. - Capability inventory: The skill has access to the
bashinterpreter, thempCLI tool, and standard file system utilities likecatandsed(SKILL.md). - Sanitization: The skill uses
sedto strip ANSI escape codes for plain text presentation, but does not implement specific sanitization for embedded natural language instructions.
Audit Metadata