Security audit

tmux

Security checks for vulnerabilities and agentic risk

Overview

This tmux skill is coherent, but it gives agents broad control over live terminal sessions and can expose pane contents without enough safety guidance.

Review before installing. Use this only when you are comfortable letting the agent inspect and type into tmux panes. Confirm exact session/window/pane targets before sending input, avoid C-c/C-d or kill-session unless explicitly intended, and do not use the wait helper on panes that may contain secrets unless you accept that timeout logs may include pane output.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 84)May include surrounding context.
md
- `scripts/find-sessions.sh`: discover sessions.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The documentation shows sending control keys like C-c and C-d to live panes without warning that these inputs commonly interrupt, abort, log out of, or terminate running programs and shells. Because this skill is meant for interacting with existing tmux panes, using such keys against the wrong pane can cause unintended service interruption, data loss, or premature termination of active tasks.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The skill documents tmux kill-session -t worker alongside other session commands without any warning that it will immediately terminate the tmux session and any processes attached to it. In a skill specifically designed to control live interactive sessions, this increases the chance an agent or user will apply the command to the wrong target and disrupt active work or kill long-running jobs.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: On timeout, the script prints the last captured tmux pane contents to stderr, which can expose sensitive data such as credentials, tokens, command output, or other secrets present in the pane history. In this skill's context, tmux is explicitly used to control interactive CLIs, making it likely to handle confidential terminal content and increasing the risk of unintended disclosure through logs or higher-level agent error surfaces.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.