tmux-for-interactive-commands
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a wrapper script (scripts/tmux-wrapper.sh) designed to launch and control arbitrary interactive shell commands via tmux. This is the primary intended functionality of the skill.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it captures terminal output via tmux capture-pane. Malicious instructions displayed by an interactive tool could potentially influence the agent's behavior.
- Ingestion points: scripts/tmux-wrapper.sh (capture action).
- Boundary markers: Absent.
- Capability inventory: Arbitrary command execution and keyboard input simulation.
- Sanitization: None.
Audit Metadata