📦
Audit History
configuring-tmux - 4 audits
Version comparison
Capability and finding changes across audited versions, newest first.
Audit version 4 Latest
Jul 5, 2026, 03:01 PM
Most static findings are false positives from Markdown code fences, tmux syntax, expected dotfile paths, and documented public URLs. The fixed /tmp cache examples and pane-content persistence setting are real local privacy and integrity concerns. No prompt injection or data-exfiltration intent was found.
2
Files scanned
227
Lines analyzed
6
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Terminal Pane Content Persistence
The plugin setup enables automatic restore and pane-content capture. This can write terminal output, including tokens or commands, into tmux-resurrect state files.
Line 59 directly enables pane content capture, and lines 57-58 enable automatic restore and periodic saves. This is a clear local privacy risk, although it is not exfiltration.
Capability review items (2)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Temp directory access
CACHE="/tmp/my-widget-cache"
The example uses a fixed cache file under /tmp, which can be read or replaced by other local users on shared systems. Use a user-owned cache directory with private permissions.
Medium
Temp directory access
CACHE="/tmp/news-cache" # one headline per line, refreshed by background fetch
The example uses a fixed cache file under /tmp, which can be read or replaced by other local users on shared systems. Use a user-owned cache directory with private permissions.
Risk Factors
🌐 Network access (6)
📁 Filesystem access (37)
README.md:20 README.md:37 README.md:38 README.md:20 README.md:37 README.md:38 SKILL.md:18 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:37 SKILL.md:48 SKILL.md:61 SKILL.md:75 SKILL.md:78 SKILL.md:146 SKILL.md:169 SKILL.md:170 SKILL.md:14 SKILL.md:15 SKILL.md:16 SKILL.md:18 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:37 SKILL.md:48 SKILL.md:61 SKILL.md:75 SKILL.md:78 SKILL.md:146 SKILL.md:169 SKILL.md:170 SKILL.md:147 SKILL.md:102 SKILL.md:127 SKILL.md:15
⚙️ External commands (46)
SKILL.md:13-17 SKILL.md:17-18 SKILL.md:18 SKILL.md:19 SKILL.md:22-26 SKILL.md:26-27 SKILL.md:27 SKILL.md:28-31 SKILL.md:31-35 SKILL.md:35-37 SKILL.md:37-46 SKILL.md:46-63 SKILL.md:63-69 SKILL.md:69 SKILL.md:71-79 SKILL.md:79-81 SKILL.md:81 SKILL.md:82-88 SKILL.md:88-90 SKILL.md:90-97 SKILL.md:97-100 SKILL.md:100-113 SKILL.md:113-116 SKILL.md:116-122 SKILL.md:122-125 SKILL.md:125-132 SKILL.md:132-135 SKILL.md:135-136 SKILL.md:136-139 SKILL.md:139-145 SKILL.md:145-151 SKILL.md:151-159 SKILL.md:159 SKILL.md:160 SKILL.md:161-163 SKILL.md:163 SKILL.md:164 SKILL.md:168-171 SKILL.md:106 SKILL.md:129 SKILL.md:130 SKILL.md:131 SKILL.md:100-113 SKILL.md:125-132 SKILL.md:101 SKILL.md:126
Audited by: codex
Jul 5, 2026, 03:01 PM
Most static findings are false positives from Markdown code fences, tmux syntax, expected dotfile paths, and documented public URLs. The fixed /tmp cache examples and pane-content persistence setting are real local privacy and integrity concerns. No prompt injection or data-exfiltration intent was found.
2
Files scanned
227
Lines analyzed
6
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Terminal Pane Content Persistence
The plugin setup enables automatic restore and pane-content capture. This can write terminal output, including tokens or commands, into tmux-resurrect state files.
Line 59 directly enables pane content capture, and lines 57-58 enable automatic restore and periodic saves. This is a clear local privacy risk, although it is not exfiltration.
Capability review items (2)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Temp directory access
CACHE="/tmp/my-widget-cache"
The example uses a fixed cache file under /tmp, which can be read or replaced by other local users on shared systems. Use a user-owned cache directory with private permissions.
Medium
Temp directory access
CACHE="/tmp/news-cache" # one headline per line, refreshed by background fetch
The example uses a fixed cache file under /tmp, which can be read or replaced by other local users on shared systems. Use a user-owned cache directory with private permissions.
Risk Factors
🌐 Network access (6)
📁 Filesystem access (37)
README.md:20 README.md:37 README.md:38 README.md:20 README.md:37 README.md:38 SKILL.md:18 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:37 SKILL.md:48 SKILL.md:61 SKILL.md:75 SKILL.md:78 SKILL.md:146 SKILL.md:169 SKILL.md:170 SKILL.md:14 SKILL.md:15 SKILL.md:16 SKILL.md:18 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:37 SKILL.md:48 SKILL.md:61 SKILL.md:75 SKILL.md:78 SKILL.md:146 SKILL.md:169 SKILL.md:170 SKILL.md:147 SKILL.md:102 SKILL.md:127 SKILL.md:15
⚙️ External commands (46)
SKILL.md:13-17 SKILL.md:17-18 SKILL.md:18 SKILL.md:19 SKILL.md:22-26 SKILL.md:26-27 SKILL.md:27 SKILL.md:28-31 SKILL.md:31-35 SKILL.md:35-37 SKILL.md:37-46 SKILL.md:46-63 SKILL.md:63-69 SKILL.md:69 SKILL.md:71-79 SKILL.md:79-81 SKILL.md:81 SKILL.md:82-88 SKILL.md:88-90 SKILL.md:90-97 SKILL.md:97-100 SKILL.md:100-113 SKILL.md:113-116 SKILL.md:116-122 SKILL.md:122-125 SKILL.md:125-132 SKILL.md:132-135 SKILL.md:135-136 SKILL.md:136-139 SKILL.md:139-145 SKILL.md:145-151 SKILL.md:151-159 SKILL.md:159 SKILL.md:160 SKILL.md:161-163 SKILL.md:163 SKILL.md:164 SKILL.md:168-171 SKILL.md:106 SKILL.md:129 SKILL.md:130 SKILL.md:131 SKILL.md:100-113 SKILL.md:125-132 SKILL.md:101 SKILL.md:126
Audited by: codex
Jun 30, 2026, 04:22 AM
Static analysis found many command, network, and filesystem patterns, but review shows they are mostly tmux setup examples and framework installation guidance. The confirmed risk is medium because following the skill can clone third-party repositories, change files under the user's home directory, create a forced tmux symlink, and configure tmux status command substitutions. No malicious intent or prompt injection attempt was found.
2
Files scanned
227
Lines analyzed
8
Review items
1
False positives ignored
Capability review items (5)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Home Directory tmux Configuration Changes
The skill instructs agents to clone frameworks, copy tmux files, create a forced symlink, install TPM plugins, and source tmux config files. This matches the skill purpose, but it can overwrite or alter a user's existing tmux configuration if applied without review.
The file operations are explicit and semantically tied to tmux setup. The risk is environmental modification, not evidence of malware.
Medium
External Repository and API Access
The skill references GitHub clone commands for tmux frameworks and plugins, plus a Yahoo Finance curl request for a widget. These endpoints are relevant to the stated purpose, but they still introduce third-party network trust and availability risks.
The network commands are directly visible and serve documented tmux installation and widget examples. No credential exfiltration or suspicious destination was found.
Medium
tmux Status Command Substitution
The skill teaches tmux status entries that execute shell scripts through command substitution. This is a normal tmux feature, but any script path placed there will run repeatedly inside the user's tmux session.
The command-substitution behavior is explicit in tmux configuration examples. It is legitimate but can become unsafe if users insert untrusted scripts.
Low
Markdown Backtick Detections Are Not Ruby Execution
The static analyzer reported many Ruby backtick execution patterns, but the reviewed locations are Markdown code fences or inline command examples. The examples still include shell commands, but the Ruby-specific detection is a false positive.
The files are Markdown documentation, not Ruby source. The backticks delimit examples rather than executing code.
Low
Troubleshooting Commands Are Benign
The reported reconnaissance-like patterns are tmux troubleshooting references, such as checking tmux options and known status bar mistakes. They do not enumerate host secrets or collect system identity data.
The commands inspect tmux configuration state for troubleshooting. I found no semantic evidence of host reconnaissance beyond normal tmux diagnostics.
Static false positives ignored (1)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Low
Weak Cryptography Static Findings Are False Positives
The scanner flagged weak cryptography at descriptive text locations, but no cryptographic algorithm or password hashing implementation appears in the reviewed files. No evidence found for real cryptographic behavior.
The cited lines describe the skill and do not contain crypto APIs, hashes, or encryption instructions. This is a strong false positive.
Risk Factors
⚙️ External commands (9)
🌐 Network access (6)
Detected Patterns
Forced Symlink to tmux ConfigRepeated Shell Execution from Status BarThird-Party Network Fetch for Finance Widget
Audited by: codex
Apr 7, 2026, 12:22 PM
Static analysis detected 125 patterns but all are false positives. Network URLs point to legitimate GitHub repositories for tmux frameworks. External command patterns are standard tmux #() syntax for status bar widgets. Filesystem operations target standard tmux config locations (~/.tmux.conf, ~/.config/tmux/). No malicious intent, credential theft, or data exfiltration detected.
3
Files scanned
244
Lines analyzed
3
Review items
0
False positives ignored
Risk Factors
🌐 Network access (7)
⚙️ External commands (71)
README.md:9 README.md:14-16 README.md:16-19 README.md:19-21 README.md:21-35 README.md:35-39 README.md:39-41 README.md:41 README.md:41-44 README.md:44-50 SKILL.md:13-17 SKILL.md:17-18 SKILL.md:18 SKILL.md:18 SKILL.md:18-19 SKILL.md:19 SKILL.md:19-22 SKILL.md:22-26 SKILL.md:26-27 SKILL.md:27 SKILL.md:27-28 SKILL.md:28-31 SKILL.md:31-35 SKILL.md:35-37 SKILL.md:37-46 SKILL.md:46-63 SKILL.md:63-69 SKILL.md:69 SKILL.md:69-71 SKILL.md:71-79 SKILL.md:79-81 SKILL.md:81 SKILL.md:81-82 SKILL.md:82-88 SKILL.md:88-90 SKILL.md:90-97 SKILL.md:97-100 SKILL.md:100-113 SKILL.md:113-116 SKILL.md:116-122 SKILL.md:122-125 SKILL.md:125-132 SKILL.md:132-135 SKILL.md:135-136 SKILL.md:136-139 SKILL.md:139-145 SKILL.md:145-151 SKILL.md:151-159 SKILL.md:159 SKILL.md:159-160 SKILL.md:160 SKILL.md:160-161 SKILL.md:161-163 SKILL.md:163 SKILL.md:163-164 SKILL.md:164 SKILL.md:164 SKILL.md:164 SKILL.md:164 SKILL.md:164 SKILL.md:164-168 SKILL.md:168-171 SKILL.md:106 SKILL.md:106 SKILL.md:129 SKILL.md:130 SKILL.md:131 SKILL.md:100-113 SKILL.md:125-132 SKILL.md:101 SKILL.md:126
📁 Filesystem access (41)
README.md:20 README.md:37 README.md:38 README.md:20 README.md:37 README.md:38 SKILL.md:18 SKILL.md:18 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:37 SKILL.md:48 SKILL.md:61 SKILL.md:75 SKILL.md:75 SKILL.md:78 SKILL.md:146 SKILL.md:169 SKILL.md:170 SKILL.md:14 SKILL.md:15 SKILL.md:16 SKILL.md:18 SKILL.md:18 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:37 SKILL.md:48 SKILL.md:61 SKILL.md:75 SKILL.md:75 SKILL.md:78 SKILL.md:146 SKILL.md:169 SKILL.md:170 SKILL.md:147 SKILL.md:102 SKILL.md:127 SKILL.md:15
Audited by: claude