using-tmux-agent-tools

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose and capabilities mostly align for tmux-based worker orchestration, but it requires unverified external CLIs and supports forwarding credentials into them. There is no clear evidence of deliberate exfiltration or malware, yet the combination of autonomous worker dispatch, secret passing, and unverifiable tool provenance makes the overall security risk high.

Confidence: 85%Severity: 74%
Audit Metadata
Analyzed At
Oct 14, 2026, 10:02 AM
Package URL
pkg:socket/skills-sh/ohyeh%2Ftmux-agent-tools%2Fusing-tmux-agent-tools%2F@76a7f53b8b40a03fc51283413ace2af1502dc76e3b511190d980611ed0f8bd32