The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/install_tmux_beginner_config.sh is vulnerable to shell command injection. In the install_remote function, the --remote-path and --host arguments are interpolated into a double-quoted string passed to ssh. Because the outer string is double-quoted, the local shell will attempt to expand any command substitutions or variables within the parameters before the ssh command is even executed. For example, a path value like $(touch /tmp/pwned) would execute on the agent's local machine.
[PROMPT_INJECTION]: The skill exhibits an insecure injection surface categorized as indirect prompt injection.
Ingestion points: The --host and --remote-path arguments in scripts/install_tmux_beginner_config.sh are intended to receive user-supplied values via the agent's instructions.
Boundary markers: Absent. There are no mechanisms in the instructions or the script to validate or delimit these inputs.
Capability inventory: The script performs file system modifications (backup, copy, delete), network operations (SSH/SCP), and configuration reloads via tmux source-file.
Sanitization: Absent. No validation, escaping, or filtering is performed on the arguments, allowing for the command injection described above.

tmux-remote-bootstrap