cmux-custom-sidebar
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches authoring guidelines from the manaflow-ai official GitHub repository. This is used to inform the agent about the supported syntax and data structures.
- [COMMAND_EXECUTION]: Employs the
cmuxcommand-line utility for validating and selecting sidebar configurations. It also writes configuration files to~/.config/cmux/sidebars/, which is the standard location for this tool's settings. - [DYNAMIC_EXECUTION]: The skill generates SwiftUI-style configuration files that are interpreted by the cmux application at runtime. This is the primary feature of the tool and uses a restricted language subset.
- [INDIRECT_PROMPT_INJECTION]: The skill involves processing user descriptions and live workspace metadata (such as PR status and workspace titles) to generate UI code. It provides documentation links to ensure the agent follows the correct schema, reducing the risk of malformed output.
Audit Metadata