smux

Warn

Audited by Socket on Apr 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s tmux control behavior matches its stated purpose, but it materially expands an agent’s ability to read and drive other local panes, including approving prompts. The main concern is trust: it depends on a nonstandard `tmux-bridge` binary whose provenance is not verifiable from the provided evidence, which makes this a high-risk local-control skill rather than confirmed malware.

Confidence: 86%Severity: 78%
Audit Metadata
Analyzed At
Apr 18, 2026, 04:07 PM
Package URL
pkg:socket/skills-sh/ninehills%2Fskills%2Fsmux%2F@cdaaf4397d928e44d0bd404b331feec71588af04