← 返回 Skills 市场
mkuiwu

Smux

作者 mkuiwu · GitHub ↗ · v1.0.0 · MIT-0
darwinlinux ⚠ suspicious
111
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install smux
功能描述
Cross-pane messaging for tmux. Use `tmux-bridge` command to send messages between panes labeled p1, p2, p3...
安全使用建议
Do not install or run this skill blindly. The SKILL.md expects a third-party 'tmux-bridge' CLI but the skill package provides no binary, no install instructions, and no source/homepage to vet. Before using: (1) obtain and review the tmux-bridge binary/source from a trusted location (or ask the author for a link); (2) inspect what tmux-bridge does (especially whether it reads other panes, writes files, or contacts networks); (3) do not append anything to ~/.tmux.conf without reviewing the auto-label content; (4) if you allow an agent to run this skill autonomously, be aware it is instructed to auto-reply to incoming 'pending' messages — that can cause automatic cross-pane messaging and potential data leakage; and (5) prefer skills that declare all required binaries and provide an install or a verifiable homepage/source. If you can obtain the tmux-bridge source for review, rescan the skill with that included — that information would likely change the assessment.
功能分析
Type: OpenClaw Skill Name: smux Version: 1.0.0 The 'smux' skill bundle is a utility for managing multi-agent collaboration within tmux panes. It defines a communication protocol using a `tmux-bridge` CLI tool (documented in SKILL.md and tmux-bridge.md) to send, receive, and track messages between panes labeled p1, p2, etc. The instructions include security best practices, such as mandating absolute paths for scripts to prevent path hijacking, and the suggested modification to `~/.tmux.conf` is a standard configuration step for tmux utilities with no evidence of malicious intent or data exfiltration.
能力标签
crypto
能力评估
Purpose & Capability
The skill claims to provide a tmux-based cross-pane messaging CLI (tmux-bridge). The registry metadata only requires 'tmux' but the SKILL.md repeatedly instructs the agent to run a separate 'tmux-bridge' binary. That binary is not included, not declared as a required dependency, and there is no homepage or source repository to verify what it does. This mismatch (declared requirements vs. actual instructions) is incoherent and potentially risky.
Instruction Scope
Runtime instructions tell the agent to run tmux-bridge commands (send, pending, reply) and to append auto-label configuration into ~/.tmux.conf and then source it. Modifying ~/.tmux.conf is a non-trivial side effect and should be explicit/trusted. References in the tmux fallback docs to commands like 'capture-pane -p' indicate the ability to read pane contents; while SKILL.md doesn't explicitly instruct arbitrary pane captures, the provided fallbacks could be used to read other panes' output. The skill also prescribes agents automatically replying to pending messages, which could cause automatic cross-agent messaging or unintended disclosure if deployed autonomously.
Install Mechanism
There is no install spec (instruction-only), which minimizes direct file-writing by the skill itself. However, because the skill expects an external 'tmux-bridge' CLI that is neither bundled nor linked, an operator or agent may try to obtain or execute that binary from elsewhere — the absence of a trusted install source or homepage is a practical and security concern.
Credentials
The skill requests no environment variables or credentials. Requiring only the 'tmux' binary (but in practice also needing 'tmux-bridge') is proportionate to a tmux-integration skill — the main issue is the missing/undeclared tmux-bridge artifact, not overbroad credential requests.
Persistence & Privilege
always:false (normal). The skill instructs agents to modify ~/.tmux.conf (persistent user config), which is a write to user configuration and should be performed only with explicit consent. Also the agent collaboration rules encourage automatic replies to other panes; combined with autonomous agent invocation this could lead to automatic cross-pane messaging loops or unintended actions. This is a behavioral risk rather than a direct privilege escalation.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install smux
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /smux 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release with streamlined, label-based tmux agent coordination. - Added `tmux-bridge` as the primary interface for cross-pane messaging using `p1`, `p2`, `p3` labels—no need to remember pane IDs. - Introduced commands for launching, killing sessions, sending messages with/without expecting replies, and replying to pending tasks. - Simplified agent collaboration guidelines: always check `pending` before replying, and avoid unnecessary or empty acknowledgements. - Provided automated pane labeling and easy auto-label setup via tmux.conf. - Documented best practices for agent-to-agent task delegation and session management.
v2.1.1
Improve ClawHub-facing docs with clearer onboarding, common usage patterns, follow-up workflow, and practical defaults.
v2.1.0
Prefer installed tmux-bridge, forbid relative paths, add explicit --expect-reply/--no-reply flow, and add pending/check follow-up commands.
元数据
Slug smux
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 3
常见问题

Smux 是什么?

Cross-pane messaging for tmux. Use `tmux-bridge` command to send messages between panes labeled p1, p2, p3... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 111 次。

如何安装 Smux?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install smux」即可一键安装,无需额外配置。

Smux 是免费的吗?

是的,Smux 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Smux 支持哪些平台?

Smux 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(darwin, linux)。

谁开发了 Smux?

由 mkuiwu(@mkuiwu)开发并维护,当前版本 v1.0.0。

💬 留言讨论