tmux-agent-herdr-lite
Warn
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: MEDIUMPERSISTENCECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [PERSISTENCE]: The installer script (
scripts/install.sh) modifies the user's~/.zshrcfile to add a shell hook. This hook (assets/agent-shell-hook.zsh) automatically executes theagent-observescript every time a command is entered or finishes in a tmux pane, ensuring the cockpit's tracking logic persists across new shell sessions.\n- [COMMAND_EXECUTION]: The skill makes extensive use of thetmuxCLI and Python'ssubprocessmodule to manage terminal panes, send keys, and execute arbitrary commands. Specifically,scripts/agent-paneandscripts/agent-runare designed to execute user or agent-supplied commands within tmux windows.\n- [INDIRECT_PROMPT_INJECTION]: The status classification engine inscripts/agent_classify.pyparses terminal output captured viatmux capture-pane. A malicious process or data could output specific strings (e.g.,AGENT_STATUS: done) to manipulate the monitoring agent's state classification.\n - Ingestion points: Terminal output captured in
scripts/agent-status-scanandscripts/agent-read(viatmux capture-pane).\n - Boundary markers: None; the classifier searches for regex patterns within the raw terminal buffer tail.\n
- Capability inventory: The skill can launch new processes, send keystrokes to active panes, and manipulate git worktrees.\n
- Sanitization: Terminal output is not sanitized before being evaluated against status detection patterns.\n- [DYNAMIC_EXECUTION]: The skill dynamically assembles shell command wrappers in
scripts/agent-paneand generates tmux configuration files during installation usingsedto substitute absolute paths into the generated configuration.\n- [EXTERNAL_DOWNLOADS]: The skill configuration inassets/tmux-agent-persistence.confreferences external tmux plugins (tmux-resurrect,tmux-continuum) and the installer script provides instructions to download the Tmux Plugin Manager (TPM) from its official GitHub repository.
Audit Metadata