dmux-workflows

Warn

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends the global installation of an npm package named 'dmux' via npm install -g dmux. It points to an external GitHub repository github.com/standardagents/dmux. This organization is not recognized as a trusted vendor, which means the package content is unverifiable and could potentially change without oversight.
  • [COMMAND_EXECUTION]: The skill provides workflow patterns that rely on executing external CLI tools, specifically dmux and tmux. It also suggests managing Git worktrees and running other agent harnesses (like Claude Code or Codex) within these sessions. While intended for orchestration, this behavior facilitates the execution of code from unverified third-party sources.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 22, 2026, 01:42 PM