tmux
Audited by Socket on Mar 2, 2026
1 alert found:
SecurityOverall, the skill’s footprint is coherent with its stated purpose of orchestrating tmux-based interactive agent workstreams. The main security considerations are the potential for command injection into target sessions via send-keys (especially if inputs are untrusted) and possible leakage of pane content through capture-pane/logging. There is no evident malicious network activity, credential harvesting, or autonomous external actions within the provided code fragment. Given the use of direct shell command execution paths and socket-based orchestration, the risk is present but not inherently malicious; it should be reviewed for proper input validation, access controls around socket usage, and safe logging of captured outputs.