tmux-skill
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for executing shell commands and interactive programs within tmux sessions using
send-keysandrun-shellinSKILL.md. This functionality is central to the skill's purpose of terminal management.\n- [INDIRECT_PROMPT_INJECTION]: The skill implements a pattern where the agent reads and processes output from terminal panes, creating a surface for indirect prompt injection if the captured output originates from an untrusted process.\n - Ingestion points: Terminal output captured via
tmux capture-pane -pas described inSKILL.md.\n - Boundary markers: The sentinel echo pattern (
__DONE__) is used for completion detection but does not distinguish between program output and the sentinel itself.\n - Capability inventory: The agent can execute commands via
tmux send-keysandrun-shellinSKILL.md.\n - Sanitization: No sanitization or escaping of the captured output is demonstrated before the agent processes it.
Audit Metadata