Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed local cmux control helper, but it can type into or close active terminal workspaces if an agent uses those commands.
Install this only if you want your agent to control a local cmux session. Prefer read-only status/listing commands unless you intentionally want the agent to type into terminals, press keys, split panes, or close workspaces, and verify the target workspace or surface before mutating actions.
The skill exposes environment-dependent behavior via CMUX_SOCKET_PATH and operational control over a local Unix socket, but it declares no explicit tool scope or permission boundaries. In an agent setting, lack of declared scope can cause the skill to be invoked more broadly than intended, increasing the chance of unauthorized interaction with a live terminal multiplexer session.
The skill advertises commands that can send arbitrary text to terminals and close workspaces, which are effectively command-injection and destructive-control primitives when used against an active cmux session. Without prominent warnings, confirmation requirements, or safe usage guidance, an agent may issue unintended commands that execute in terminal panes, terminate workflows, or alter user state.
No suspicious patterns detected.
