skills/kaiukov/cmux/cmux-tmux-compat/Gen Agent Trust Hub

cmux-tmux-compat

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill defines commands that allow shell execution as part of its core terminal management functionality. Specifically, cmux pipe-pane and cmux respawn-pane (referenced in references/commands.md) take a --command argument to run shell processes. Examples provided include standard utilities such as pbcopy and exec $SHELL -l.
  • [PROMPT_INJECTION]: The skill exposes an indirect prompt injection surface by design when reading terminal data. 1. Ingestion points: The cmux capture-pane command in SKILL.md and references/commands.md reads content from terminal surfaces and scrollback history. 2. Boundary markers: None are specified to isolate the captured terminal content from the agent's instructional context. 3. Capability inventory: The skill facilitates command execution via cmux pipe-pane and cmux respawn-pane (documented in references/commands.md). 4. Sanitization: There is no evidence of sanitization or filtering of terminal output before it is ingested by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 02:48 PM
Security Audit — agent-trust-hub — cmux-tmux-compat