project-session-manager
Automates isolated development environments using git worktrees and tmux sessions for efficient parallel project management.
Install this skill
Security score
The project-session-manager skill was audited on May 14, 2026 and we found 25 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Webhook reference - potential data exfiltration
| 17 | | `feature <proj> <name>` | Feature development | `/psm feature omc add-webhooks` | |
Webhook reference - potential data exfiltration
| 356 | PR: #123 - Add webhook support |
Webhook reference - potential data exfiltration
| 357 | Branch: feature/webhooks |
Access to hidden dotfiles in home directory
| 27 | - **Alias**: `omc#123` (requires `~/.psm/projects.json`) |
Access to hidden dotfiles in home directory
| 34 | ### Project Aliases (`~/.psm/projects.json`) |
Access to hidden dotfiles in home directory
| 46 | "worktree_root": "~/.psm/worktrees", |
Access to hidden dotfiles in home directory
| 55 | ~/.psm/ |
Access to hidden dotfiles in home directory
| 67 | | PR Review | `psm:omc:pr-123` | `~/.psm/worktrees/omd/pr-123` | |
Access to hidden dotfiles in home directory
| 68 | | Issue Fix | `psm:omc:issue-42` | `~/.psm/worktrees/omd/issue-42` | |
Access to hidden dotfiles in home directory
| 69 | | Feature | `psm:omc:feat-auth` | `~/.psm/worktrees/omd/feat-auth` | |
Access to hidden dotfiles in home directory
| 93 | cat ~/.psm/projects.json 2>/dev/null || echo '{"aliases":{}}' |
Access to hidden dotfiles in home directory
| 151 | # Add to ~/.psm/sessions.json |
Access to hidden dotfiles in home directory
| 169 | Worktree: ~/.psm/worktrees/omd/pr-123 |
Access to hidden dotfiles in home directory
| 238 | cat ~/.psm/sessions.json 2>/dev/null || echo '{"sessions":{}}' |
Access to hidden dotfiles in home directory
| 248 | ls -la ~/.psm/worktrees/*/ 2>/dev/null |
Access to hidden dotfiles in home directory
| 257 | omc:pr-123 | review | active | ~/.psm/worktrees/omd/pr-123 |
Access to hidden dotfiles in home directory
| 258 | omc:issue-42 | fix | detached | ~/.psm/worktrees/omd/issue-42 |
Access to hidden dotfiles in home directory
| 292 | worktree_path=$(jq -r ".sessions[\"$session_id\"].worktree" ~/.psm/sessions.json) |
Access to hidden dotfiles in home directory
| 293 | source_repo=$(jq -r ".sessions[\"$session_id\"].source_repo" ~/.psm/sessions.json) |
Access to hidden dotfiles in home directory
| 384 | mkdir -p ~/.psm/worktrees ~/.psm/logs |
Access to hidden dotfiles in home directory
| 387 | if [[ ! -f ~/.psm/projects.json ]]; then |
Access to hidden dotfiles in home directory
| 388 | cat > ~/.psm/projects.json << 'EOF' |
Access to hidden dotfiles in home directory
| 398 | "worktree_root": "~/.psm/worktrees", |
Access to hidden dotfiles in home directory
| 407 | if [[ ! -f ~/.psm/sessions.json ]]; then |
Access to hidden dotfiles in home directory
| 408 | echo '{"version":1,"sessions":{},"stats":{"total_created":0,"total_cleaned":0}}' > ~/.psm/sessions.json |