tmux

SUSPICIOUS. The skill’s main capabilities are broadly aligned with terminal session management, but two trust issues raise it above benign: Windows support depends on non-upstream `psmux` with a documented pipe-to-exec installer path, and the examples encourage sending SSH passwords as keystrokes. I see no clear evidence of malicious exfiltration or deception, but the install provenance for `agent-sommelier-cli` is unclear and the secret-handling pattern is unsafe.