cmux

SUSPICIOUS. The skill's stated cloud-sandbox functionality is not internally consistent with the cited `cmux` npm package or the publisher's official installation/documentation trail. Because it asks users to globally install a mismatched CLI and then upload local project files, authenticate, and automate websites, the install-trust and data-flow risks are disproportionate to what can be verified from the evidence.