ClawHub
Back to skill

Security audit

tmux

Security checks for vulnerabilities and agentic risk

Overview

This tmux skill is coherent, but it gives agents broad control over live terminal sessions and can expose pane contents without enough safety guidance.

Review before installing. Use this only when you are comfortable letting the agent inspect and type into tmux panes. Confirm exact session/window/pane targets before sending input, avoid C-c/C-d or kill-session unless explicitly intended, and do not use the wait helper on panes that may contain secrets unless you accept that timeout logs may include pane output.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Ae1

High
Category
analysis-evasion
Content
- `scripts/find-sessions.sh`: discover sessions.
Confidence
100% confidence
Finding
Referenced artifact was not completely inspected

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The documentation shows sending control keys like `C-c` and `C-d` to live panes without warning that these inputs commonly interrupt, abort, log out of, or terminate running programs and shells. Because this skill is meant for interacting with existing tmux panes, using such keys against the wrong pane can cause unintended service interruption, data loss, or premature termination of active tasks.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill documents `tmux kill-session -t worker` alongside other session commands without any warning that it will immediately terminate the tmux session and any processes attached to it. In a skill specifically designed to control live interactive sessions, this increases the chance an agent or user will apply the command to the wrong target and disrupt active work or kill long-running jobs.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
On timeout, the script prints the last captured tmux pane contents to stderr, which can expose sensitive data such as credentials, tokens, command output, or other secrets present in the pane history. In this skill's context, tmux is explicitly used to control interactive CLIs, making it likely to handle confidential terminal content and increasing the risk of unintended disclosure through logs or higher-level agent error surfaces.

Static analysis

No suspicious patterns detected.