project-session-manager
Manages isolated development environments using git worktrees and tmux sessions for efficient parallel task handling.
Install this skill
Security score
The project-session-manager skill was audited on May 19, 2026 and we found 26 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Webhook reference - potential data exfiltration
| 30 | | `feature <proj> <name>` | Feature development | `/psm feature omc add-webhooks` | |
Webhook reference - potential data exfiltration
| 122 | psm feature mywork add-webhooks |
Webhook reference - potential data exfiltration
| 448 | PR: #123 - Add webhook support |
Webhook reference - potential data exfiltration
| 449 | Branch: feature/webhooks |
Access to hidden dotfiles in home directory
| 40 | - **Alias**: `omc#123` (requires `~/.psm/projects.json`) |
Access to hidden dotfiles in home directory
| 47 | ### Project Aliases (`~/.psm/projects.json`) |
Access to hidden dotfiles in home directory
| 59 | "worktree_root": "~/.psm/worktrees", |
Access to hidden dotfiles in home directory
| 147 | ~/.psm/ |
Access to hidden dotfiles in home directory
| 159 | | PR Review | `psm:omc:pr-123` | `~/.psm/worktrees/omc/pr-123` | |
Access to hidden dotfiles in home directory
| 160 | | Issue Fix | `psm:omc:issue-42` | `~/.psm/worktrees/omc/issue-42` | |
Access to hidden dotfiles in home directory
| 161 | | Feature | `psm:omc:feat-auth` | `~/.psm/worktrees/omc/feat-auth` | |
Access to hidden dotfiles in home directory
| 185 | cat ~/.psm/projects.json 2>/dev/null || echo '{"aliases":{}}' |
Access to hidden dotfiles in home directory
| 243 | # Add to ~/.psm/sessions.json |
Access to hidden dotfiles in home directory
| 261 | Worktree: ~/.psm/worktrees/omc/pr-123 |
Access to hidden dotfiles in home directory
| 330 | cat ~/.psm/sessions.json 2>/dev/null || echo '{"sessions":{}}' |
Access to hidden dotfiles in home directory
| 340 | ls -la ~/.psm/worktrees/*/ 2>/dev/null |
Access to hidden dotfiles in home directory
| 349 | omc:pr-123 | review | active | ~/.psm/worktrees/omc/pr-123 |
Access to hidden dotfiles in home directory
| 350 | omc:issue-42 | fix | detached | ~/.psm/worktrees/omc/issue-42 |
Access to hidden dotfiles in home directory
| 384 | worktree_path=$(jq -r ".sessions[\"$session_id\"].worktree" ~/.psm/sessions.json) |
Access to hidden dotfiles in home directory
| 385 | source_repo=$(jq -r ".sessions[\"$session_id\"].source_repo" ~/.psm/sessions.json) |
Access to hidden dotfiles in home directory
| 539 | mkdir -p ~/.psm/worktrees ~/.psm/logs |
Access to hidden dotfiles in home directory
| 542 | if [[ ! -f ~/.psm/projects.json ]]; then |
Access to hidden dotfiles in home directory
| 543 | cat > ~/.psm/projects.json << 'EOF' |
Access to hidden dotfiles in home directory
| 553 | "worktree_root": "~/.psm/worktrees", |
Access to hidden dotfiles in home directory
| 562 | if [[ ! -f ~/.psm/sessions.json ]]; then |
Access to hidden dotfiles in home directory
| 563 | echo '{"version":1,"sessions":{},"stats":{"total_created":0,"total_cleaned":0}}' > ~/.psm/sessions.json |