tmux
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
tmux send-keysandtmux new-windowto execute arbitrary shell commands. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection.
- Ingestion points: The
tmux capture-panecommand (SKILL.md) reads terminal pane content directly into the agent context. - Boundary markers: No delimiters or instructions are provided to help the agent distinguish between command output and potentially malicious instructions.
- Capability inventory: The agent can execute shell commands and manage background processes.
- Sanitization: No sanitization or validation is performed on the content retrieved from terminal panes.
Audit Metadata