Security audit
Smux
Security checks across malware telemetry and agentic risk
Overview
Smux is a disclosed tmux cross-pane messaging skill, but it relies on an undeclared external command and lets other panes steer where the agent sends final results.
Install only if you already trust the local `tmux-bridge` executable and understand that other tmux panes may send tasks or receive final results. Verify the binary source and path, avoid sharing secrets through pane messages, confirm before killing sessions, and review any `~/.tmux.conf` changes before applying them.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.