setup-statusline
Warn
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPERSISTENCEDYNAMIC_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill modifies the
statusLineconfiguration in~/.claude/settings.jsonto execute a shell script (statusline-logger.sh) located in the plugin directory. This script is executed by the host environment whenever the status bar is rendered. - [PERSISTENCE]: By modifying the global
settings.jsonfile for the agent, the skill ensures its script runs persistently across different sessions and interactions until manually uninstalled. - [DYNAMIC_EXECUTION]: The instructions mandate the use of
node -e(node eval) to programmatically manipulate the JSON settings file, which involves dynamic execution of code to modify system configuration. - [PRIVILEGE_ESCALATION]: The skill uses
chmod +xto grant execution permissions to thestatusline-logger.shscript on the host file system.
Audit Metadata