multi-agent

This is a tmux pane-management script with legitimate orchestration behavior and no clear malicious payload. It has a concrete command-injection vulnerability because LABEL, FILE, and potentially WATCHER are embedded in a shell command using unescaped single quotes before being passed to tmux. It also has predictable temporary-file and unquoted-argument weaknesses. Inputs should be safely escaped or passed without an intermediate shell, and registration writes should use secure, locked temporary files.