tmux
Warn
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPERSISTENCEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on executing shell commands to interact with tmux and the system crontab.\n
scripts/tmux_run_job.pyusessubprocess.runto execute commands inside abash -lcshell within tmux windows.\nscripts/tmux_healthcheck.pyandscripts/tmux_gc.pyusesubprocess.runfor tmux session and window management (list, kill, etc.).\nscripts/tmux_healthcheck_cron.pyexecutescrontabto read and modify the user's scheduled tasks.\n- [PERSISTENCE]: The skill provides automated maintenance through cron job installation.\nscripts/tmux_healthcheck_cron.pycontains logic to add, status, and remove an entry in the user's crontab (crontab -).\n- The cron entry executes a cleanup script (
scripts/tmux_healthcheck.py) periodically (default every 15 minutes).\n- [DYNAMIC_EXECUTION]: The skill assembles and executes command strings at runtime.\n scripts/tmux_run_job.pyconstructs a wrapped shell command including status tracking and tmux signaling logic, which is then passed to the shell.\nscripts/tmux_healthcheck_cron.pydynamically builds the cron command string based on provided arguments like session names and log paths.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides mechanisms to ingest data from running jobs, creating a surface for indirect prompt injection.\n- Ingestion points:
SKILL.mdinstructs the agent to usetmux capture-paneto read output from background jobs.\n - Boundary markers: The skill documentation does not specify the use of delimiters or instructions to ignore embedded commands in the captured output.\n
- Capability inventory: The agent has capabilities to execute shell commands, manage tmux sessions, and modify crontab entries.\n
- Sanitization: There is no evidence of sanitization or filtering applied to the captured terminal output before it is processed by the agent.
Audit Metadata