msu-statusline-config
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local shell commands using
bashto execute a script located in the user's configuration directory (msu-statusline.sh) to query active settings and test the rendering of the status line. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process configuration data from external files, creating a potential surface for indirect instruction injection. 1. Ingestion points: Configuration data is read from
${CLAUDE_CONFIG_DIR}/msu-statusline.confandsettings.json. 2. Boundary markers: No specific boundary markers or delimiters are instructed for use when the agent parses these files. 3. Capability inventory: The skill has permissions to read and write files and to execute local shell commands. 4. Sanitization: Instructions include manual validation against script-defined guards and the rejection of values containing comment characters or newlines to prevent file structure corruption.
Audit Metadata