iterm2
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
workflows/SetupTmux.mdandTmuxConfig.mdfiles provide instructions to download the Tmux Plugin Manager (TPM) from a community repository usinggit clone https://github.com/tmux-plugins/tpm. This represents a dependency on external code. - [REMOTE_CODE_EXECUTION]: The configuration setup in
workflows/SetupTmux.mdandTmuxConfig.mdincludes a command to execute the TPM management script (run '~/.tmux/plugins/tpm/tpm'). This script is responsible for downloading and running additional tmux plugins on the host system. - [COMMAND_EXECUTION]: The
SKILL.mdfile defines a workflow routing mechanism that automatically invokes a local script located at~/.claude/Tools/SkillWorkflowNotification. This tool is used to track the execution of specific workflows for observability. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a surface for processing user-provided terminal instructions and project names into shell commands.
- Ingestion points: User input related to session naming, project setup, and troubleshooting triggers terminal command generation across all files.
- Boundary markers: None present in the instructions to delimit user-provided data from system commands.
- Capability inventory: The skill utilizes
bash,git,brew, andpbcopyto modify system configuration and manage processes. - Sanitization: There is no evidence of sanitization for user-supplied strings before they are interpolated into shell commands for session creation or configuration updates.
Audit Metadata