Is yangliu2060/startmux safe?
Yes. yangliu2060/startmux is safe to install. Oathe's behavioral security audit gave the startmux skill by yangliu2060 a trust score of 82/100 with 3 findings, none critical or high.
https://github.com/yangliu2060/startmux
Is yangliu2060/startmux safe to install?
This is a legitimate tmux automation skill for creating multi-agent workstations. While some canary files were accessed during installation (likely by system authentication processes), no actual data exfiltration occurred and the skill content contains only standard tmux operations.
What security issues were found in yangliu2060/startmux?
Category Scores
Findings (3)
MEDIUM Sensitive canary files accessed during installation -20 ▶
Multiple honeypot files including .env, .ssh/id_rsa, .aws/credentials, and .npmrc were accessed during the installation process. However, this appears to be system-level processes (SSH authentication, sudo) rather than the skill itself.
LOW Powerful terminal control capabilities -10 ▶
The skill provides extensive terminal automation capabilities including remote command execution and output capture via tmux. While legitimate for its stated purpose, these features could be misused if combined with malicious input.
INFO All canary files remained intact -5 ▶
Despite being accessed, all honeypot files maintained their original content with no modifications or exfiltration detected.
Should I install yangliu2060/startmux?
Oathe's verdict for yangliu2060/startmux is SAFE with a trust score of 82/100. Recommendation: Install.