cmux-fork

SUSPICIOUS: the core local forking behavior matches the stated purpose, and install/data-flow trust looks low risk, but the default use of `--dangerously-skip-permissions` is disproportionate because it disables approval safeguards in the forked agent session. This is not confirmed malware or exfiltration, but it is a meaningful autonomy and safety-control risk.