dmux-workflows
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of local shell scripts and system tools to manage parallel agent sessions.
- Executes
node scripts/orchestrate-worktrees.jswhich processes orchestration plans. - Utilizes system-level commands including
tmux,git worktree, anddmuxfor environment management. - Invokes agent harnesses like
claude,codex, anddmuxwithin isolated panes. - [PROMPT_INJECTION]: There is a potential for indirect prompt injection via the
plan.jsonconfiguration format used by the orchestration helper. - Ingestion points: The
plan.jsonfile is read and parsed byscripts/orchestrate-worktrees.js. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the documentation for the JSON schema.
- Capability inventory: The script has the capability to execute arbitrary shell commands (via the
launcherCommandproperty), create git worktrees, and write task-related files to the file system. - Sanitization: The documentation does not describe any sanitization or validation logic for the
launcherCommandorworkerstask strings before they are executed in a shell context.
Audit Metadata