setup-statusline
Fail
Audited by Snyk on Aug 21, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill explicitly reads ~/.claude/settings.json and instructs the agent to display the existing statusLine command verbatim ("command: {existing command}"), which could contain API keys or other secrets and would force the LLM to output them.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata