zenmux-statusline
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands (
curl,jq,git,chmod,cp) to install the status line and fetch status information. These are standard tools for the described tasks. - [EXTERNAL_DOWNLOADS]: The script performs network requests to
zenmux.aito retrieve account subscription and balance information. As the skill is authored by ZenMux, these requests to the vendor's official API are expected and legitimate. - [CREDENTIALS_UNSAFE]: The script utilizes the
ZENMUX_MANAGEMENT_KEYenvironment variable to authenticate API requests. It also implements masking for theZENMUX_API_KEYwhen displaying it in the status line to prevent accidental exposure of the full secret in the UI. - [PERSISTENCE]: The skill modifies
~/.claude/settings.jsonto register the status line script. This is the intended persistent configuration change required for the status line to function across sessions.
Audit Metadata