tmux
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to interact with the host system's
tmuxutility. It provides examples for creating sessions, listing panes, and sending keys. The included helper scripts,scripts/find-sessions.shandscripts/wait-for-text.sh, use thetmuxCLI to perform polling and discovery operations. - [PROMPT_INJECTION]: The skill lacks safeguards against indirect prompt injection, as it encourages the agent to capture and parse terminal output that may originate from untrusted external sources (e.g., website content, logs, or interactive CLI outputs).
- Ingestion points:
tmux capture-paneis utilized inSKILL.mdandscripts/wait-for-text.shto retrieve the contents of terminal windows. - Boundary markers: There are no delimiters or specific instructions provided to the agent to differentiate between system status messages and untrusted data within the tmux scrollback.
- Capability inventory: The agent has the capability to execute commands in sub-shells via
tmux send-keysand manage background processes. - Sanitization: The skill does not perform any validation or escaping of the data captured from the terminal before the agent processes it.
Audit Metadata