dmux-workflows
Warn
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the global installation of an npm package named 'dmux' via
npm install -g dmux. It points to an external GitHub repositorygithub.com/standardagents/dmux. This organization is not recognized as a trusted vendor, which means the package content is unverifiable and could potentially change without oversight. - [COMMAND_EXECUTION]: The skill provides workflow patterns that rely on executing external CLI tools, specifically
dmuxandtmux. It also suggests managing Git worktrees and running other agent harnesses (like Claude Code or Codex) within these sessions. While intended for orchestration, this behavior facilitates the execution of code from unverified third-party sources.
Audit Metadata