cmux-delegate

SUSPICIOUS: the skill’s purpose is coherent, but it normalizes launching secondary agents in dangerous no-approval modes and relays user tasks into terminal sessions with broad autonomy. Data flow stays local and there is no clear credential theft or malicious exfiltration, but the default safety bypass makes the skill high-risk for unintended autonomous actions.