Aguara Watch

tilt

skills-sh:0xbigboss_claude-code__tilt

View source
A
100/100

First Seen

Feb 19, 2026

Last Scanned

Feb 20, 2026

Findings

2

Score

100/100

LOW 2

Findings (2)

LOW
Terminal multiplexer command injection
L77

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

LOW
Terminal multiplexer command injection
L80

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.