cmux-tmux-compat
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill defines commands that allow shell execution as part of its core terminal management functionality. Specifically,
cmux pipe-paneandcmux respawn-pane(referenced inreferences/commands.md) take a--commandargument to run shell processes. Examples provided include standard utilities such aspbcopyandexec $SHELL -l. - [PROMPT_INJECTION]: The skill exposes an indirect prompt injection surface by design when reading terminal data. 1. Ingestion points: The
cmux capture-panecommand inSKILL.mdandreferences/commands.mdreads content from terminal surfaces and scrollback history. 2. Boundary markers: None are specified to isolate the captured terminal content from the agent's instructional context. 3. Capability inventory: The skill facilitates command execution viacmux pipe-paneandcmux respawn-pane(documented inreferences/commands.md). 4. Sanitization: There is no evidence of sanitization or filtering of terminal output before it is ingested by the agent.
Audit Metadata