The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill provides the command sudo apt install tmux in its prerequisites section. While the rules instruct the agent to show the command to the user and stop rather than executing it autonomously, the inclusion of commands for acquiring elevated privileges is a security-sensitive pattern.
[COMMAND_EXECUTION]: The skill's primary function is to execute shell commands within terminal sessions using tmux send-keys. While the instructions include a rule against sending destructive commands without confirmation, the underlying capability allows for broad system interaction.
[INDIRECT_PROMPT_INJECTION]: The skill provides functionality to capture terminal output via tmux capture-pane, which is then processed by the agent. This introduces a surface where malicious content (e.g., in a file being viewed or the output of a remote command) could attempt to influence agent behavior.
Ingestion points: tmux capture-pane (SKILL.md) captures pane content and scrollback buffers into the agent's context.
Boundary markers: No specific delimiters or "ignore previous instructions" headers are mandated for the captured terminal content.
Capability inventory: The agent has access to Bash for shell execution and Read/Write tools for file system interaction.
Sanitization: There is no mention of sanitization, filtering, or escaping for the data ingested from terminal panes.

tmux-control