tmux

Warn

Audited by Socket on Mar 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Overall, the skill’s footprint is coherent with its stated purpose of orchestrating tmux-based interactive agent workstreams. The main security considerations are the potential for command injection into target sessions via send-keys (especially if inputs are untrusted) and possible leakage of pane content through capture-pane/logging. There is no evident malicious network activity, credential harvesting, or autonomous external actions within the provided code fragment. Given the use of direct shell command execution paths and socket-based orchestration, the risk is present but not inherently malicious; it should be reviewed for proper input validation, access controls around socket usage, and safe logging of captured outputs.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Mar 2, 2026, 08:47 AM
Package URL
pkg:socket/skills-sh/sundial-org%2Fawesome-openclaw-skills%2Ftmux%2F@82b9a0a2729896dd0627b355b378d48fd4de6ad6