ClawHub
Back to skill

Security audit

Muxray

Security checks for vulnerabilities and agentic risk

Overview

Muxray is a coherent local tmux-inspection skill that discloses its pane-reading behavior and limits its bundled scripts to read-only observation commands.

Install only if you are comfortable letting the agent read relevant tmux pane text. Pane output may include secrets, so prefer classification summaries and redaction over raw pane dumps. The skill installs an external muxray binary via Go, so review or trust that upstream project before installation.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.