cmux-fork

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
  • [PRIVILEGE_ESCALATION]: Bypasses user confirmation for tool execution in forked sessions. By default, the skill executes claude --continue --fork-session --dangerously-skip-permissions in the new terminal pane. This flag allows the forked agent to perform actions and use tools without requesting manual approval for each operation, assuming all permissions from the previous context or bypassing them entirely. While documented as a convenience feature, it significantly diminishes security oversight for the child session.
  • [COMMAND_EXECUTION]: Performs high-privilege terminal manipulation through the cmux utility. The skill uses cmux send to inject strings (including commands with newlines) directly into other terminal surfaces. It identifies the operational environment by reading the CMUX_SOCKET_PATH environment variable and manages terminal layout using cmux new-split and cmux new-workspace.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 03:23 AM