tmux
Enables remote control of tmux sessions for interactive command-line interfaces, enhancing productivity in development environments.
Install this skill
Security score
The tmux skill was audited on Jun 13, 2026 and we found 9 security issues across 2 threat categories, including 2 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 49 | ```bash |
Template literal with variable interpolation in command context
| 74 | - Agents MUST place tmux sockets under `CLAUDE_TMUX_SOCKET_DIR` (defaults to `${TMPDIR:-/tmp}/claude-tmux-sockets`) and use `tmux -S "$SOCKET"` so we can enumerate/clean them. Create the dir first: `m |
Template literal with variable interpolation in command context
| 86 | - Scan all sockets under the shared directory: `~/.dotfiles/home/common/programs/pi-coding-agent/skills/tmux/scripts/find-sessions.sh --all` (uses `CLAUDE_TMUX_SOCKET_DIR` or `${TMPDIR:-/tmp}/claude-t |
Access to hidden dotfiles in home directory
| 12 | **Script location:** `~/.dotfiles/home/common/programs/pi-coding-agent/skills/tmux/scripts/` |
Access to hidden dotfiles in home directory
| 85 | - List sessions on your active socket with metadata: `~/.dotfiles/home/common/programs/pi-coding-agent/skills/tmux/scripts/find-sessions.sh -S "$SOCKET"`; add `-q partial-name` to filter. |
Access to hidden dotfiles in home directory
| 86 | - Scan all sockets under the shared directory: `~/.dotfiles/home/common/programs/pi-coding-agent/skills/tmux/scripts/find-sessions.sh --all` (uses `CLAUDE_TMUX_SOCKET_DIR` or `${TMPDIR:-/tmp}/claude-t |
Access to hidden dotfiles in home directory
| 113 | ~/.dotfiles/home/common/programs/pi-coding-agent/skills/tmux/scripts/wait-for-text.sh -t "$SESSION":0.0 -p '^>>>' -T 15 -l 4000 |
Access to hidden dotfiles in home directory
| 131 | `~/.dotfiles/home/common/programs/pi-coding-agent/skills/tmux/scripts/wait-for-text.sh` polls a pane for a regex (or fixed string) with a timeout. Works on Linux/macOS with bash + tmux + grep. |
Access to hidden dotfiles in home directory
| 134 | ~/.dotfiles/home/common/programs/pi-coding-agent/skills/tmux/scripts/wait-for-text.sh -t session:0.0 -p 'pattern' [-F] [-T 20] [-i 0.5] [-l 2000] |