cmux-fork
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [PRIVILEGE_ESCALATION]: Bypasses user confirmation for tool execution in forked sessions. By default, the skill executes
claude --continue --fork-session --dangerously-skip-permissionsin the new terminal pane. This flag allows the forked agent to perform actions and use tools without requesting manual approval for each operation, assuming all permissions from the previous context or bypassing them entirely. While documented as a convenience feature, it significantly diminishes security oversight for the child session. - [COMMAND_EXECUTION]: Performs high-privilege terminal manipulation through the cmux utility. The skill uses
cmux sendto inject strings (including commands with newlines) directly into other terminal surfaces. It identifies the operational environment by reading theCMUX_SOCKET_PATHenvironment variable and manages terminal layout usingcmux new-splitandcmux new-workspace.
Audit Metadata