agent-manager-skill

This package is a local agent orchestration tool that deliberately spawns and controls CLI agents inside tmux. The functionality itself is not intrinsically malicious, but it creates a high-value attack surface: arbitrary command execution via agent configs or piped input. There are no direct signs of built-in malware or obfuscation in the provided snippet. Primary security concern is misuse (untrusted configs, automated edits, or compromised repository) leading to host compromise or data exfiltration. Recommend treating agent definitions as sensitive, running the manager in a confined, least-privilege environment, and adding validation/whitelisting of agent commands before execution.