iterm2

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The workflows/SetupTmux.md and TmuxConfig.md files provide instructions to download the Tmux Plugin Manager (TPM) from a community repository using git clone https://github.com/tmux-plugins/tpm. This represents a dependency on external code.
  • [REMOTE_CODE_EXECUTION]: The configuration setup in workflows/SetupTmux.md and TmuxConfig.md includes a command to execute the TPM management script (run '~/.tmux/plugins/tpm/tpm'). This script is responsible for downloading and running additional tmux plugins on the host system.
  • [COMMAND_EXECUTION]: The SKILL.md file defines a workflow routing mechanism that automatically invokes a local script located at ~/.claude/Tools/SkillWorkflowNotification. This tool is used to track the execution of specific workflows for observability.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a surface for processing user-provided terminal instructions and project names into shell commands.
  • Ingestion points: User input related to session naming, project setup, and troubleshooting triggers terminal command generation across all files.
  • Boundary markers: None present in the instructions to delimit user-provided data from system commands.
  • Capability inventory: The skill utilizes bash, git, brew, and pbcopy to modify system configuration and manage processes.
  • Sanitization: There is no evidence of sanitization for user-supplied strings before they are interpolated into shell commands for session creation or configuration updates.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 01:25 PM