tmux

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill's example explicitly sends a plaintext password via tmx sk (tmx sk server "mypassword"), which requires including the secret verbatim in commands/agent output and thus poses an exfiltration risk.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). Both links point to a personal GitHub repository and its releases/bucket used to distribute a Windows binary (psmux); personal GitHub releases and custom Scoop buckets are a common vector for distributing unsigned or unverified executables, so they should be treated as suspicious until vetted (verified author, signatures, community trust, or checksum).

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow described by this skill (“tmx run/r to capture output” from tmux sessions created with user-provided commands like SSH or tailing log files) would ingest whatever free text appears in the remote session output, and that output can originate from outsider-authored sources.