Back to skill
Skillv1.0.0
VirusTotal security
Tmux · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 4:33 AM
- Hash
- 513e11548dfdb212435d1f2df3a4aa916e4b962e0633b39e6f8bbc8716630856
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: tmux-controller Version: 1.0.0 The `SKILL.md` instructions advise the AI agent to execute `claude` and `codex` with flags such as `--dangerously-skip-permissions`, `--full-auto`, or `--yolo`. These flags indicate a bypass of security checks or interactive confirmations, which, while not directly malicious actions by this skill, introduce a significant vulnerability by lowering the security posture of the applications run within `tmux` sessions. The `scripts/wait-for-text.sh` utility script appears robust against common shell injection vectors for its `grep` pattern argument.
- External report
- View on VirusTotal