dmux-workflows
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the dmux utility globally via npm and references its GitHub repository at github.com/standardagents/dmux.
- [COMMAND_EXECUTION]: The instructions include several shell commands for agent orchestration, including dmux session initialization, git worktree creation for isolation, and installation of system dependencies like tmux.
- [INDIRECT_PROMPT_INJECTION]: The multi-agent workflow allows merging output from parallel sub-sessions into a main session, which could potentially transfer instructions if a sub-agent processes malicious data.
- Ingestion points: Data merged from sub-panes into the main agent context.
- Boundary markers: Recommends manual review of output before merging.
- Capability inventory: Agents are described as performing file edits and shell commands.
- Sanitization: Manual review is suggested as a best practice.
Audit Metadata