Security audit
Security checks for vulnerabilities and agentic risk
This Markdown-only tmux helper has no hidden scripts, but it requests broad command/write authority with vague, inconsistent instructions that need review before installation.
Review this skill carefully before installing. It appears to be a low-code Markdown helper rather than malware, but only use it for tmux tasks, verify any command before it runs, avoid giving it API keys unless the provider and use are clear, and require confirmation before closing or changing active sessions/windows.
The skill markets itself as 'instruction-only' and 'does what it advertises,' yet it declares exec and write capabilities and includes command/API execution setup steps. This mismatch can mislead users and invoking agents about the true trust boundary, increasing the chance that the skill is granted execution privileges without appropriate scrutiny.
The file gives contradictory statements about synchronization support: the FAQ says tmux synchronization is unsupported, while a later comparison table claims synchronization functionality. Contradictory capability claims can cause operators or agents to make unsafe assumptions about what actions the skill may attempt or automate.
The invocation description is overly broad and extends to generic project management, planning, tracking, and team collaboration rather than tmux-specific tasks. In an agent ecosystem, broad triggers can cause the skill to be selected in unrelated contexts, unintentionally granting exec/write-capable behavior where a non-executing skill would have been safer.
The skill describes tmux management features but does not clearly warn that commands may create, rename, kill, or otherwise modify sessions and windows. Without an explicit warning and confirmation model, users may trigger destructive terminal state changes or lose active work unintentionally.
No suspicious patterns detected.
