add-macos-statusbar — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited add-macos-statusbar (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Adds a persistent menu bar icon that shows NanoClaw's running status and lets the user start, stop, or restart the service — similar to how Docker Desktop appears in the menu bar.
macOS only. Requires Xcode Command Line Tools (swiftc).
If not on macOS, stop and tell the user:
This skill is macOS only. The menu bar status indicator uses AppKit and requires swiftc (Xcode Command Line Tools).which swiftcIf not found, tell the user:
Xcode Command Line Tools are required. Install them by running:
>
``bash xcode-select --install ``>
Then re-run /add-macos-statusbar.launchctl list | grep com.nanoclaw.statusbarIf it returns a PID (not -), tell the user it's already installed and skip to Phase 3 (Verify).
The source lives in the skill directory. Compile it into dist/:
mkdir -p dist
swiftc -O -o dist/statusbar "${CLAUDE_SKILL_DIR}/add/src/statusbar.swift"This produces a small native binary at dist/statusbar.
On macOS Sequoia or later, clear the quarantine attribute so the binary can run:
xattr -cr dist/statusbarDetermine the absolute project root and home directory:
pwd
echo $HOMECreate ~/Library/LaunchAgents/com.nanoclaw.statusbar.plist, substituting the actual values for {PROJECT_ROOT} and {HOME}:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.nanoclaw.statusbar</string>
<key>ProgramArguments</key>
<array>
<string>{PROJECT_ROOT}/dist/statusbar</string>
</array>
<key>RunAtLoad</key>
<true/>
<key>KeepAlive</key>
<true/>
<key>EnvironmentVariables</key>
<dict>
<key>HOME</key>
<string>{HOME}</string>
</dict>
<key>StandardOutPath</key>
<string>{PROJECT_ROOT}/logs/statusbar.log</string>
<key>StandardErrorPath</key>
<string>{PROJECT_ROOT}/logs/statusbar.error.log</string>
</dict>
</plist>launchctl load ~/Library/LaunchAgents/com.nanoclaw.statusbar.plistlaunchctl list | grep com.nanoclaw.statusbarThe first column should show a PID (not -).
Tell the user:
The bolt icon should now appear in your macOS menu bar. Click it to see NanoClaw's status and control the service.
>
- Green dot — NanoClaw is running - Red dot — NanoClaw is stopped
>
Use Restart after making code changes, and View Logs to open the log file directly.
To uninstall, follow REMOVE.md.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.