Code Tmux

This skill does what it says (orchestrates tmux + git worktrees) but has several red flags you should consider before installing or using it: 1) Metadata omission — the registry claims no required binaries/env vars, yet the instructions require git, tmux, Node/nvm, and external coding-agent CLIs; ask the author to correct the metadata. 2) Secrets exposure — the skill explicitly tells you to symlink your project's .env/.env.local into task worktrees; that gives any spawned agent process direct access to credentials/API keys. Avoid symlinking secrets unless you trust the agent CLI absolutely; prefer sanitized envs or run tasks in an isolated container/VM. 3) Dangerous flags and automated responses — the recommended '--dangerously-skip-permissions' flag and auto-sending 'y' to prompts can bypass safeguards; investigate what that flag does for the specific agent CLI (claude). 4) Persistent files — the skill writes preferences to MEMORY.md; review that file and where memory is stored. 5) Run in isolation — if you try it, run it in a disposable environment (container, VM, or throwaway repo) and verify agent behavior before letting it operate on important code or secrets. If you plan to adopt it for regular use, request the maintainer to: (a) declare required binaries and config paths in metadata, (b) remove or make optional the .env symlink step, (c) remove recommendations to bypass permissions, and (d) document exactly what data the agent will see and what the memory persistence does.