技能 tmux
📦
tmux
内容修订 r1 中风险 ⚙️ 外部命令📁 文件系统访问🔑 环境变量
管理持久化 tmux 会话
长时间运行的终端任务很难在不同代理回合之间监控。此技能可创建、列出、捕获、控制和清理 tmux 会话，用于持久化命令执行。
支持: Claude Codex Code(CC)
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "tmux" from https://skillstore.io/skills/dwsy-tmux.md and its manifest at https://skillstore.io/api/skills/dwsy-tmux/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“tmux”。 启动后台构建，并展示我如何监控它。
预期结果:
该技能会创建一个命名 tmux 任务会话，并返回会话标识符、attach 命令和用于后续监控的 capture 命令。
正在使用“tmux”。 检查我的开发服务器会话的最新输出。
预期结果:
该技能会捕获最近的窗格文本，并总结服务看起来是已就绪、仍在启动还是已失败。
正在使用“tmux”。 清理旧的 tmux 会话。
预期结果:
- 列出受管理会话的年龄和状态。
- 移除超过请求阈值的会话。
- 报告已清理的会话数量。
安全审计
中风险v9 • 2026/7/9 打开版本化报告
Most static findings are false positives from Markdown code fences, TypeScript template strings, documented installation paths, and benign shell redirection. The real risk is intentional local command execution through tmux session creation and key sending, plus temporary socket and session metadata storage.
9
已扫描文件
1,114
分析行数
23
复核项
0
已忽略误报
已确认安全问题 (1)
中
Arbitrary Local Command Execution by Design
The skill is designed to create tmux sessions from caller-provided commands and send caller-provided keys into live panes. This is useful for agent workflows but exposes the same risk as allowing an agent to run local shell commands.
Both implementation and documentation show command creation and keystroke sending into tmux sessions. This is intentional functionality, not hidden malware, but it is a real execution capability.
能力复核项 (23)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
中
Ruby/shell backtick execution
await $`tmux -S ${socket} new -d -s ${id} -n shell`.quiet();
This line runs tmux or shell helper logic as part of the skill. The behavior is intentional, but it is a real local command-execution capability that should be disclosed.
中
Ruby/shell backtick execution
await $`tmux -S ${socket} send-keys -t ${target} -- ${command} Enter`.quiet();
This line runs tmux or shell helper logic as part of the skill. The behavior is intentional, but it is a real local command-execution capability that should be disclosed.
中
Ruby/shell backtick execution
await $`tmux -S ${session.socket} kill-session -t ${id}`.quiet();
This line runs tmux or shell helper logic as part of the skill. The behavior is intentional, but it is a real local command-execution capability that should be disclosed.
中
Ruby/shell backtick execution
await $`tmux -S ${socket} send-keys -t ${target} ${args}`.quiet();
This line runs tmux or shell helper logic as part of the skill. The behavior is intentional, but it is a real local command-execution capability that should be disclosed.
中
Ruby/shell backtick execution
const result = await $`tmux -S ${socket} capture-pane -p -J -t ${target} -S -${lines}`.quiet();
This line runs tmux or shell helper logic as part of the skill. The behavior is intentional, but it is a real local command-execution capability that should be disclosed.
中
Ruby/shell backtick execution
const result = await $`tmux -S ${socket} display-message -p '#{window_activity_flag}' -t ${target}`.
This line runs tmux or shell helper logic as part of the skill. The behavior is intentional, but it is a real local command-execution capability that should be disclosed.
中
Ruby/shell backtick execution
await $`tmux -S ${session.socket} kill-session -t ${id}`.quiet();
This line runs tmux or shell helper logic as part of the skill. The behavior is intentional, but it is a real local command-execution capability that should be disclosed.
中
Ruby/shell backtick execution
const result = await $`tmux -S ${socket} list-sessions -F '#{session_name}'`.quiet();
This line runs tmux or shell helper logic as part of the skill. The behavior is intentional, but it is a real local command-execution capability that should be disclosed.
中
Shell command substitution
if ! sessions="$("${tmux_cmd[@]}" list-sessions -F '#{session_name}\t#{session_attached}\t#{session_
This line runs tmux or shell helper logic as part of the skill. The behavior is intentional, but it is a real local command-execution capability that should be disclosed.
中
Shell command substitution
sessions="$(printf '%s\n' "$sessions" | grep -i -- "$query" || true)"
This line runs tmux or shell helper logic as part of the skill. The behavior is intentional, but it is a real local command-execution capability that should be disclosed.
中
Shell command substitution
attached_label=$([[ "$attached" == "1" ]] && echo "attached" || echo "detached")
This line runs tmux or shell helper logic as part of the skill. The behavior is intentional, but it is a real local command-execution capability that should be disclosed.
中
Shell command substitution
start_epoch=$(date +%s)
This line runs tmux or shell helper logic as part of the skill. The behavior is intentional, but it is a real local command-execution capability that should be disclosed.
中
Shell command substitution
deadline=$((start_epoch + timeout))
This line runs tmux or shell helper logic as part of the skill. The behavior is intentional, but it is a real local command-execution capability that should be disclosed.
中
Shell command substitution
pane_text="$(tmux capture-pane -p -J -t "$target" -S "-${lines}" 2>/dev/null || true)"
This line runs tmux or shell helper logic as part of the skill. The behavior is intentional, but it is a real local command-execution capability that should be disclosed.
中
Shell command substitution
now=$(date +%s)
This line runs tmux or shell helper logic as part of the skill. The behavior is intentional, but it is a real local command-execution capability that should be disclosed.
中
Temp directory access
- **Default Socket**: `/tmp/pi-tmux-sockets/pi.sock`
The documentation references tmux sockets or managed state under /tmp. Temporary filesystem usage is expected, but it is still a real local filesystem dependency.
中
Temp directory access
# Output: tmux -S /tmp/pi-tmux-sockets/pi.sock attach -t pi-task-python-20250107-123456
The documentation references tmux sockets or managed state under /tmp. Temporary filesystem usage is expected, but it is still a real local filesystem dependency.
中
Temp directory access
"socket": "/tmp/pi-tmux-sockets/pi.sock",
The documentation references tmux sockets or managed state under /tmp. Temporary filesystem usage is expected, but it is still a real local filesystem dependency.
中
Temp directory access
tmux -S /tmp/pi-tmux-sockets/pi.sock attach -t pi-service-dev-server-20250107-123456
The documentation references tmux sockets or managed state under /tmp. Temporary filesystem usage is expected, but it is still a real local filesystem dependency.
中
Temp directory access
tmux -S /tmp/pi-tmux-sockets/pi.sock attach -t pi-task-compile-20250107-123456
The documentation references tmux sockets or managed state under /tmp. Temporary filesystem usage is expected, but it is still a real local filesystem dependency.
中
Temp directory access
tmux -S /tmp/pi-tmux-sockets/pi.sock capture-pane -p -J -t pi-task-compile-20250107-123456:0.0 -S -2
The documentation references tmux sockets or managed state under /tmp. Temporary filesystem usage is expected, but it is still a real local filesystem dependency.
中
Temp directory access
tmux -S /tmp/pi-tmux-sockets/pi.sock attach -t <session-id>
The documentation references tmux sockets or managed state under /tmp. Temporary filesystem usage is expected, but it is still a real local filesystem dependency.
中
Temp directory access
ls -la /tmp/pi-tmux-sockets/
The documentation references tmux sockets or managed state under /tmp. Temporary filesystem usage is expected, but it is still a real local filesystem dependency.
风险因素
⚙️ 外部命令 (50)
examples/long-task.ts:15 examples/long-task.ts:16 examples/long-task.ts:17 examples/long-task.ts:18 examples/long-task.ts:19 examples/python-repl.ts:11 examples/python-repl.ts:12 examples/python-repl.ts:13 examples/start-service.ts:15 examples/start-service.ts:16 examples/start-service.ts:17 examples/start-service.ts:18 examples/start-service.ts:19 examples/start-service.ts:33 lib.ts:41 lib.ts:45 lib.ts:89 lib.ts:90 lib.ts:120 lib.ts:122 lib.ts:130 lib.ts:135 lib.ts:151 lib.ts:152 lib.ts:159 lib.ts:185 lib.ts:201 lib.ts:233 lib.ts:234 lib.ts:235 lib.ts:236 lib.ts:237 lib.ts:252 lib.ts:253 lib.ts:267 lib.ts:271 lib.ts:272 lib.ts:273 lib.ts:274 lib.ts:275 lib.ts:276 lib.ts:288 lib.ts:293 lib.ts:305 lib.ts:321 lib.ts:329 lib.ts:341 lib.ts:344 lib.ts:345 lib.ts:346
📁 文件系统访问 (50)
examples/long-task.ts:2 examples/long-task.ts:7 examples/python-repl.ts:2 examples/python-repl.ts:7 examples/start-service.ts:2 examples/start-service.ts:7 examples/start-service.ts:33 examples/start-service.ts:33 scripts/find-sessions.sh:46 scripts/find-sessions.sh:55 scripts/wait-for-text.sh:57 scripts/wait-for-text.sh:68 scripts/wait-for-text.sh:70 SKILL.md:15 SKILL.md:18 SKILL.md:21 SKILL.md:24 SKILL.md:53 SKILL.md:60 SKILL.md:65 SKILL.md:72 SKILL.md:73 SKILL.md:78 SKILL.md:85 SKILL.md:90 SKILL.md:97 SKILL.md:102 SKILL.md:109 SKILL.md:114 SKILL.md:121 SKILL.md:126 SKILL.md:133 SKILL.md:134 SKILL.md:139 SKILL.md:146 SKILL.md:152 SKILL.md:191 SKILL.md:194 SKILL.md:197 SKILL.md:200 SKILL.md:208 SKILL.md:211 SKILL.md:212 SKILL.md:220 SKILL.md:226 SKILL.md:234 SKILL.md:237 SKILL.md:238 SKILL.md:256 SKILL.md:299
审计者: claude 查看审计历史 →
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/dwsy-tmux/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/dwsy-tmux?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/dwsy-tmux?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dwsy-tmux/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/dwsy-tmux.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
Dwsy. (2026). tmux security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dwsy-tmux/audits/9BibTeX 引用
@techreport{dwsy-dwsy-tmux-2026,
author = {Dwsy},
title = {tmux security audit report (audit version 9)},
institution = {Skillstore},
year = {2026},
number = {9},
url = {https://skillstore.io/skills/dwsy-tmux/audits/9},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "tmux security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
- name: "Dwsy"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/dwsy-tmux/audits/9"
identifiers:
- type: other
value: "skillstore:dwsy-tmux:audit:9"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 高 45
架构
85
可维护性
87
内容
71
社区
83
规范符合性
你能构建什么
在主代理回合之外运行长时间构建
在 tmux 中启动构建或测试命令，之后再捕获输出，而不会丢失进程状态。
管理本地开发服务
在命名 tmux 会话中启动开发服务器，并在其他工作继续进行时检查日志。
驱动交互式终端程序
启动 REPL 或 CLI，发送输入，并从同一个持久化窗格捕获响应。
试试这些提示
启动一个简单任务
使用 tmux 技能启动一个名为 build 的任务，运行我的项目构建命令。向我展示如何捕获最新输出。
监控开发服务器
为我的开发服务器创建一个 tmux 服务会话，然后检查服务器是否已成功启动。
控制交互式 REPL
在 tmux 中启动 Python REPL，发送一个简单表达式，并从窗格捕获响应。
安全清理过期会话
列出所有 tmux 技能会话，识别超过两天的非活动会话，并只清理这些会话。
最佳实践
- 创建会话前先检查命令，因为它们会在你的本地 shell 上下文中运行。
- 使用描述性会话名称，以便清理和监控更清晰。
- 如果之后可能需要日志，请在终止会话前捕获输出。
避免
- 不要运行不可信命令，也不要将密钥粘贴到受管理会话中。
- 不要让长期运行的服务在没有定期清理的情况下持续运行。
- 不要假设 tmux 会话会将命令与本地文件系统隔离。
常见问题
此技能需要什么？
它需要 tmux、Bun，以及一个允许运行 shell 命令的本地环境。
它可以运行交互式命令吗？
可以。它可以向 tmux 窗格发送按键，并在之后捕获窗格输出。
它会对命令进行沙箱隔离吗？
不可以。命令会以用户或代理进程相同的本地权限运行。
会话在哪里被跟踪？
该技能会将会话元数据和套接字存储在本地临时路径或配置的文件系统路径中。
Claude Code 可以用它来运行开发服务器吗？
可以。它可以在 tmux 中启动服务器，并在代理继续其他工作时检查输出。
它适合处理不可信输入吗？
不安全。请将命令和按键视为可执行输入，并在使用前进行检查。