cmux-orchestration

The skill is coherent with its stated purpose as a local multi-agent orchestration guide, and there is no clear credential theft or external exfiltration path. However, it is high-risk operationally because it normalizes unattended worker execution with permission-bypass flags and inherits trust from other skills and external CLIs; overall this is suspicious from a safety standpoint but not confirmed malware.