cmux

Mostly coherent and purpose-aligned for local cmux terminal orchestration, with local-only data flows to the cmux socket. The main security concern is the built-in companion-skill discovery and optional `npx skills add` instruction, which introduces transitive trust beyond the stated pane-management purpose. Overall: SUSPICIOUS due to transitive skill installation and broad terminal-control capability, not confirmed malware.