ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Cc Statusline

v0.1.1

Configure Claude Code statuslines / 状态栏. Use this skill whenever the user wants to install, set up, preview, switch, clean up, customize, restore, or fix a C...

⭐ 0· 147·0 current·0 all-time
byMiluer@miluer-tcq
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description match the actual behavior: the skill provides presets, generation, activation, preview, backup, restore and uninstall flows for Claude Code statuslines and writes/updates files under ~/.claude. No unrelated credentials, system-wide privileges, or external services are requested.
✓
Instruction Scope
SKILL.md and the visible scripts limit actions to previewing and then writing statusline scripts and updating only the statusLine field in ~/.claude/settings.json; they also save snapshots and create backups. The runtime instructions do not ask for unrelated environment variables or to read arbitrary system files.
ℹ
Install Mechanism
There is no formal install spec (instruction-only), and the README recommends cloning from a GitHub repo (normal). The bundle includes helper scripts such as install_jq.sh and platform install scripts (install_statusline_*.sh) which may perform additional steps; those particular files were not fully shown in the truncated listing, so inspect them for any network downloads or arbitrary binary installs before running.
✓
Credentials
The skill declares no required env vars or credentials. Scripts accept optional CC_STATUSLINE_* overrides and otherwise operate on $HOME/.claude, which is appropriate for a per-user statusline tool. Helper tools (jq, python) are used as reasonable fallbacks.
✓
Persistence & Privilege
The skill does not request always:true and does not attempt to persist as a system service. It writes files under the user's ~/.claude directory and updates only the statusLine field in ~/.claude/settings.json, which is consistent with its stated purpose.
Assessment
This skill appears coherent and limited to configuring Claude Code statuslines: it will write scripts and update ~/.claude/settings.json (statusLine) and create backups/snapshots. Before installing or running scripts: 1) review install_jq.sh and the platform install scripts (install_statusline_*.sh) for any network downloads or unexpected operations; 2) confirm the GitHub repo/source you clone from is trustworthy; 3) keep a backup of ~/.claude/settings.json (the scripts also save snapshots, but double-check); and 4) run a preview as recommended by the skill before it makes changes. Because some installer files were truncated in the bundle you provided, inspect those files locally — that could raise new concerns if they perform arbitrary downloads or escalate privileges.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fnjkd92wtnyht7y1ddz03q9837jv1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments