tmux

Warn

Audited by Socket on Mar 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The tmux skill is a coherent tool for local session orchestration with clear commands and state persistence. It enables powerful automation (create, attach, send, capture, cleanup) but introduces notable local security considerations: ephemeral /tmp storage, potential race conditions, and the ability to inject arbitrary keystrokes and capture pane data. Not inherently malicious, but design requires strict access control, audit logging, and cautious handling of captured data to mitigate data leakage and misuse in multi-user or untrusted environments.

Confidence: 56%Severity: 68%
Audit Metadata
Analyzed At
Mar 6, 2026, 07:10 AM
Package URL
pkg:socket/skills-sh/dwsy%2Fagent%2Ftmux%2F@15c3e8250f587258e723025daed5ad3942b49d93