setup-statusline

Warn

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONPERSISTENCEDYNAMIC_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill modifies the statusLine configuration in ~/.claude/settings.json to execute a shell script (statusline-logger.sh) located in the plugin directory. This script is executed by the host environment whenever the status bar is rendered.
  • [PERSISTENCE]: By modifying the global settings.json file for the agent, the skill ensures its script runs persistently across different sessions and interactions until manually uninstalled.
  • [DYNAMIC_EXECUTION]: The instructions mandate the use of node -e (node eval) to programmatically manipulate the JSON settings file, which involves dynamic execution of code to modify system configuration.
  • [PRIVILEGE_ESCALATION]: The skill uses chmod +x to grant execution permissions to the statusline-logger.sh script on the host file system.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 7, 2026, 02:36 AM
Security Audit — agent-trust-hub — setup-statusline