tmux-worktree-session
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill manages development workflows by executing shell commands for tmux session orchestration and git worktree management.\n- [INDIRECT_PROMPT_INJECTION]: The skill utilizes a briefing document (via the handoff skill) to initialize the agent's context. Ingestion points: Briefing file read by the agent in Window 1. Boundary markers: None specified in this orchestration layer. Capability inventory: Access to tmux, git, and local project scripts. Sanitization: None specified. While this creates an injection surface, it is a primary functional feature for task delegation.\n- [SAFE]: The instructions include a specific security guardrail: 'It may prompt for a secret... surface it and wait, never type credentials yourself.' This prevents the agent from attempting to handle sensitive credentials directly.
Audit Metadata