cmux-second-opinion

SUSPICIOUS. The skill’s core behavior fits its stated purpose, and it relies on official tools rather than unknown installers or proxy endpoints. However, it instructs the agent to launch secondary AI CLIs in dangerous approval-bypass modes and to send repository content to them automatically, which is disproportionate to a normal review workflow and weakens user safety controls.