cmux

SUSPICIOUS: The skill is largely aligned with cmux control and the cmux install path appears to be official same-org tooling, so this is not clear malware. Risk is elevated because it grants broad terminal/browser/session control, uses a local automation socket, includes a sudo step, and instructs transitive installation of another skill through npm/GitHub under mixed publisher provenance.