tmux-processes

skills-sh:0xbigboss_claude-code__tmux-processes

View source
F
0/100

First Seen

Feb 19, 2026

Last Scanned

Feb 20, 2026

Findings

13

Score

0/100

HIGH 1
MEDIUM 12

Findings (13)

HIGH
Data transmission pattern
L354

Detects patterns indicating sensitive data being sent to external services

Send keys to
FIX

Restrict file reading to the project directory and block outbound network calls that include file contents. Implement file path validation to prevent directory traversal.

FP?

Likely FP if the tool legitimately reads project files and displays them to the user locally, without sending data to external services.

MEDIUM
Terminal multiplexer command injection
L37

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

MEDIUM
Terminal multiplexer command injection
L94

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

MEDIUM
Terminal multiplexer command injection
L137

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

MEDIUM
Terminal multiplexer command injection
L188

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

MEDIUM
Terminal multiplexer command injection
L223

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

MEDIUM
Terminal multiplexer command injection
L238

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

MEDIUM
Terminal multiplexer command injection
L252

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

MEDIUM
Terminal multiplexer command injection
L355

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

MEDIUM
Terminal multiplexer command injection
L470

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

MEDIUM
Terminal multiplexer command injection
L478

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

MEDIUM
Terminal multiplexer command injection
L521

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.

MEDIUM
Terminal multiplexer command injection
L554

Detects tmux/screen send-keys used to inject commands into terminal sessions

tmux send-keys
FIX

Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.

FP?

Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.