Security audit

Tmux Temp

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly a coherent tmux helper, but it recommends running coding agents with broad unattended authority and can print captured terminal contents on timeout.

Review carefully before installing. Use this only on tmux sessions you intend the agent to control, avoid running coding agents with `--yolo` or `--full-auto` unless they are isolated in disposable worktrees or containers with no personal credentials, and be aware that timeout diagnostics may print terminal contents.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T05 · Unauthorized Access and Privilege Escalation

Error

Location: SKILL.md:73
Finding: Unsafe Recommendation to Disable Coding-Agent Approval and Sandbox Safeguards
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 97% confidence
Finding: The shell script is a read-only utility for finding tmux sessions. It parses socket-selection options (-L, -S, -A) and an optional query filter, checks for tmux, then runs tmux list-sessions to print session names, attachment state, and creation time. When --all is used, it scans a socket directory and lists sessions on each socket. There is no code to target panes, capture pane contents, send keys, or otherwise remote-control interactive CLIs. Because the declared description emphasizes active control and pane scraping, while the actual code only discovers/list sessions, this is a material description-behavior mismatch.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: On timeout, the script prints the last captured tmux pane contents to stderr, which can expose sensitive data such as secrets, tokens, command output, or user input present in the terminal history. In this skill's context, the tool is specifically designed to scrape interactive CLI panes, which makes disclosure of pane contents more likely and increases the chance that logs or calling systems unintentionally retain sensitive terminal output.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.