tmux
Audited by Socket on Feb 28, 2026
1 alert found:
SecurityBenign-to-moderately-suspicious: The skill description outlines a legitimate tool for orchestrating tmux sessions and capturing pane output for automation. The primary security concern is data exposure: captured pane outputs can leak sensitive information if shown in credentials or secrets, and the ability to enumerate and control multiple tmux sessions across a socket could enable broad access within the same context. There are no hard-coded secrets, external download patterns, or credential-forwarding behaviors evident in the fragment. To reach a benign classification, ensure explicit access controls, auditing/logging of tmux actions, least-privilege socket scoping, and clear isolation between sessions. Given the potential for pane content leakage and broad session control, the risk should be treated as moderate until mitigations are documented.