tmux
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's primary function involves executing shell commands through tmux sessions by sending keystrokes via the
tmux send-keyscommand, as documented in SKILL.md. \n- [PROMPT_INJECTION]: The skill creates an attack surface for indirect prompt injection. \n - Ingestion points: The agent ingests untrusted data from the terminal output captured via the
tmux capture-panecommand in SKILL.md and within thescripts/wait-for-text.shscript. \n - Boundary markers: There are no explicit boundary markers or instructions to the agent to ignore embedded commands within the captured terminal output. \n
- Capability inventory: The skill has high-privilege capabilities including arbitrary command execution on the host via
tmux send-keys. \n - Sanitization: There is no evidence of sanitization, filtering, or escaping of terminal output before it is processed by the agent.
Audit Metadata