Security audit
Security checks for vulnerabilities and agentic risk
This is an instruction-only tmux helper with no embedded executable payload, but it asks for broad read/write/exec authority while its scope and safety controls are poorly defined.
Install only if you are comfortable giving this skill local read/write/command-execution authority. Use it for explicit tmux tasks, and require confirmation before closing, renaming, pasting into, or otherwise changing active terminal sessions. Treat its API-key and broader automation claims as unclear unless the publisher clarifies them.
The activation guidance is overly broad and includes unrelated scenarios such as project management, teamwork, and workflow automation rather than a narrow tmux-specific trigger. In agent environments, vague invocation criteria can cause the skill to be selected for tasks far outside its intended scope, leading to unnecessary command execution or state-changing actions on the host.
The skill presents itself as an instruction-only tmux helper, but the description and later sections also reference API usage, file handling, command execution, networking, and broader automation workflows. This mismatch can mislead an agent or user about the skill’s true operational scope, increasing the chance that it is invoked in contexts where it performs more powerful actions than expected.
The skill advertises operational capabilities around session and window management but does not prominently warn that it may execute commands and alter tmux/session state. Without a clear warning and confirmation model, users and agents may trigger destructive or disruptive terminal changes without understanding the side effects.
The documentation states in the FAQ that tmux synchronization is not supported, but later claims synchronization functionality as a differentiator. Contradictory security-relevant behavior descriptions reduce operator trust and may cause users or agents to attempt unsafe or unsupported coordination actions under false assumptions.
No suspicious patterns detected.
