groove-admin-claude-statusline
Fail
Audited by Socket on Mar 9, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill's footprint is coherent with its stated purpose: it installs a local Claude Code statusline via carefully constrained file writes and settings merges, with auxiliary scripts to track loop state. There are no explicit external downloads, no broad credential access, and data flows are confined to local user configuration and ephemeral temp state. While there is some mention of OAuth tokens for Claude Pro/Max, these are described as existing within Claude’s session and not retrieved or transmitted by the skill. Overall, the risk is low-to-moderate and proportionate to the task (local UI enhancement).
Confidence: 98%
Audit Metadata