statusline-generator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill employs bash scripts to automate the installation and health check processes. These scripts perform expected actions like modifying the agent's settings file and managing local script permissions.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process JSON data provided by the agent platform. It safely ingests this data through stdin in
generate_statusline.sh, using robust parsers such asjqandpython3to extract specific fields. This approach prevents malicious data from influencing the script's execution flow. While it has the capability to execute local commands likegitand write to temporary cache files, these actions are limited to the intended status-reporting functionality. - [EXTERNAL_DOWNLOADS]: The skill references the
@anthropic-ai/ccusagetool for cost tracking, which is an official package from a trusted organization.
Audit Metadata