tmux-agent-orchestrator

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/tmux_agent.py

The code appears to be a legitimate tmux-based agent orchestration and session restoration utility, not malware. Its principal security concern is intentional high-impact command and input execution: launch and restore execute selected commands, and send/answer/assign can inject input into panes. Restore snapshots are not integrity-protected, so untrusted snapshot files must not be restored with --yes. As provided, the fragment also contains a syntax error at the end. No network exfiltration, credential theft, obfuscation, or destructive behavior is present.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Sep 10, 2026, 06:04 AM
Package URL
pkg:socket/skills-sh/ammar-hasan%2Fagent-skills%2Ftmux-agent-orchestrator%2F@d6f86fabb00f295699908e7a7cbeb8756e37556e9fd4f3edd7c302b3cde053f9
Security Audit — socket — tmux-agent-orchestrator