Scanned skills

daymade/claude-code-skills statusline-generator

Checked the catalogued skill at statusline-generator.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 22
F Security

F set by findings not listed

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 22
permission_hygienehigh SD-003
references/ccusage_integration.md
permission_hygienehigh SD-003
references/ccusage_integration.md
permission_hygienehigh SD-003
references/ccusage_integration.md
permission_hygienehigh SD-003
references/ccusage_integration.md
permission_hygienehigh SD-003
references/troubleshooting-decision-tree.md
permission_hygienehigh SD-003
references/troubleshooting-decision-tree.md
permission_hygienehigh SD-003
references/troubleshooting-decision-tree.md
permission_hygienehigh SD-003
references/troubleshooting-decision-tree.md
permission_hygienehigh SD-003
references/troubleshooting-decision-tree.md
permission_hygienehigh SD-003
references/troubleshooting-decision-tree.md
3 suppressed by AI triage
securitycritical SD-013 benign_example
SKILL.md

Documentation recommends setting an environment variable in the user’s shell rc file; it does not modify the file itself.

permission_hygienehigh SD-003 benign_example
SKILL.md

The file writes to a temporary path in /tmp, which is expected for transient data and does not pose a path traversal risk.

securitycritical SD-013 benign_example
references/customization.md

The content merely documents normal user configuration of shell startup files to set environment variables, which is harmless and not malicious persistence.