cmux-dev-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute multiple local shell and Python scripts for repository setup, app reloading, and testing (e.g.,
setup.sh,verify-local.py,reload.sh). - [EXTERNAL_DOWNLOADS]: Mentions
scripts/download-prebuilt-ghosttykit.sh, which fetches external artifacts. The skill documentation notes that these artifacts are pinned and verified. - [DYNAMIC_EXECUTION]: The workflow involves compiling source code using
xcodebuildandzig buildto create executable applications and extensions. - [INDIRECT_PROMPT_INJECTION]: The skill processes repository files (Xcode project files, configuration scripts) which could theoretically contain malicious instructions. The skill includes a 'trust boundary' warning to mitigate risks from untrusted checkouts.
Audit Metadata