dmux-workflows

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes local scripts such as scripts/orchestrate-worktrees.js and scripts/orchestrate-codex-worker.sh, as well as system tools like git worktree and tmux to manage multi-agent workflows. These operations are consistent with the skill's stated purpose of orchestration.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the dmux utility via npm install -g dmux to enable its core functionality. This is a standard package installation for an orchestration tool.
  • [PROMPT_INJECTION]: A potential surface for indirect prompt injection exists when merging outputs from multiple sub-agent sessions back into a main session. The skill addresses this by providing best practice guidance to review pane output before merging, ensuring human-in-the-loop validation of external content.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 08:58 AM