cmux

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Exclusion: SKILL.md describes cmux control and explicitly mentions browser automation (open/get text body/get value/etc.), but this workflow does not specify that it indiscriminately ingests outsider-authored free text without first selecting a specific URL/item; it primarily targets user-provided paths/refs and optionally user-specified URLs in cmux browser "$S" ....

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs running a sudo command to symlink a binary into /usr/local/bin (and recommends a global npx install), which requires elevated privileges and modifies system state.