Agent skill

cmux Socket Policy

by manaflow-ai in manaflow-ai/cmux

Sets threading and focus rules for adding or changing cmux socket and CLI commands, so telemetry stays off the main thread and automation never steals app focus.

Custom licenceAuto-check passedDevelopment

Install cmux Socket Policy

skills CLI
$ npx skills add manaflow-ai/cmux --skill cmux-socket-policy -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install manaflow-ai/cmux cmux-socket-policy --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/manaflow-ai/cmux.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/cmux-socket-policy .claude/skills/cmux-socket-policy && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
cmux-socket-policy
GitHub stars
28k
Used in
1 other repo
Token cost
~631 tokens
SKILL.md length
272 words
Files
4 (incl. references)
Skills in repo
22
Repo updated
First seen
Licence
Custom licence

At a glance

Sets threading and focus rules for adding or changing cmux socket and CLI commands, so telemetry stays off the main thread and automation never steals app focus.

  • Adding a new socket command to cmux
  • SKILL.md covers Threading policy, Focus policy, Remote relay authorization and Detailed references
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
  • Changing CLI commands that could pull focus to the app window

What it does

The threading rules say that high-frequency telemetry commands such as the report commands, ports_kick and status or log updates must not use DispatchQueue.main.sync. Their arguments are parsed, validated, deduplicated and coalesced off the main thread, and only minimal UI or model changes are scheduled with main.async. Commands that directly change AppKit or Ghostty UI state may run on the main actor, and a new socket command defaults to off-main handling with a code comment explaining any need for the main thread.

The focus rules say socket and CLI commands must not activate the app, raise windows or change in-app selection unless they carry explicit focus intent, such as window, workspace, surface or pane focus commands. Open commands focus only when run interactively and stay in the background for agents and scripts, with focus and no-focus flags to override. A third section notes that every v2 method could be a remote relay payload, so the relay policy denies by default and allowlisting needs a security analysis. Two reference files go deeper.

When your agent uses it

  • Adding a new socket command to cmux
  • Changing CLI commands that could pull focus to the app window
  • Writing telemetry commands that update status or progress frequently
  • Allowlisting a method for the remote relay

Example prompts

  • “Add a socket command that reports build progress without blocking the main thread.”
  • “Review my new workspace open command so it does not steal focus when an agent runs it.”
  • “Which of these cmux commands count as explicit focus intent?”
  • “I want to allow a new v2 method over cmux ssh; what does the relay policy require?”

Requirements

  • The cmux repository

What it can do on your machine

Read from SKILL.md and the folder at commit bbb3633. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

cmux Socket Policy loads about 631 tokens when it runs, and up to ~1.8k if it reads all its reference files. Until then it costs about 63 tokens; SKILL.md has 272 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~63
When it runs · the whole SKILL.md, loaded when a task matches
~631
With references · SKILL.md plus every file in references/, read only if the agent opens them
~1.8k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 272 words (~631 tokens).

“Every v2 method is a potential cmux ssh relay payload. RemoteRelayCommandPolicy denies by default; allowlisting a method needs the security analysis and policy tests in remote relay authorization.”

— opening of SKILL.md by manaflow-ai, Custom licence
name
cmux-socket-policy

Read the full SKILL.md on GitHub

Files

SKILL.md and 3 other files (references) in skills/cmux-socket-policy of manaflow-ai/cmux.

  • SKILL.md
  • agents/openai.yaml
  • references/remote-relay-authorization.md
  • references/threading-and-focus.md

Open the folder on GitHubat commit bbb3633

Used in 1 other repository

We found 1 copy of this SKILL.md (exact, near-identical or edited) in other folders, from 1 other GitHub owner. This page covers the copy in manaflow-ai/cmux, which our catalogue first saw on October 7, 2026.

Compare with similar skills

cmux Socket Policy next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

cmux Socket Policy compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
cmux Socket Policy this skillmanaflow-ai/cmux28k1 repos~631Automated safety check: PassCustom licence
Architecture PatternsKartikLabhshetwar/better-shot2.4k2 repos~1.4kAutomated safety check: PassCustom licence
Akka.NET Best PracticesAaronontheweb/dotnet-skills1.2k1 repos~3.3kAutomated safety check: PassMIT
Exa Reference Architecturejeremylongshore/tons-of-skills-marketplace2.8k—~1.2kAutomated safety check: PassMIT
macOS DevelopmentKartikLabhshetwar/better-shot2.4k2 repos~735Automated safety check: PassCustom licence
Swift ExpertJeffallan/claude-skills12k—~1.5kAutomated safety check: PassMIT

Similar skills

  • Architecture Patterns

    KartikLabhshetwar/better-shot

    Deep dive into software architecture for macOS. An agent skill from KartikLabhshetwar/better-shot.

    2.4k GitHub starsUsed in 2 repos~1.4k tokens
    DevelopmentAuto-check passed
  • Akka.NET Best Practices

    Aaronontheweb/dotnet-skills

    Guidance for Akka.NET actor systems covering EventStream versus DistributedPubSub, supervision, Props versus DependencyResolver, work distribution and testable cluster code.

    1.2k GitHub starsUsed in 1 repo~3.3k tokens
    DevelopmentAuto-check passed
  • Exa Reference Architecture

    jeremylongshore/tons-of-skills-marketplace

    Design an Exa architecture that separates query policy, retrieval, content handling, asynchronous state, citations, and evidence.

    2.8k GitHub stars~1.2k tokensUpdated today
    DevelopmentAuto-check passed
  • macOS Development

    KartikLabhshetwar/better-shot

    Comprehensive macOS development guidance including Swift 6+, SwiftUI, SwiftData, architecture patterns, AppKit bridging, and macOS 26 Tahoe APIs.

    2.4k GitHub starsUsed in 2 repos~735 tokens
    MobileAuto-check passed
  • Swift Expert

    Jeffallan/claude-skills

    Builds Swift apps for Apple platforms with SwiftUI, protocol-oriented design, async/await, actors and Sendable checks, verified with swift build and swift test.

    12k GitHub stars~1.5k tokensUpdated 7 days ago
    MobileAuto-check passed
  • iOS Networking

    dpearson2699/swift-ios-skills

    Build, review, or improve networking code in iOS/macOS apps using URLSession with async/await, structured concurrency, and modern Swift patterns.

    1.2k GitHub stars~4.2k tokensUpdated 2 mo ago
    Backend & APIsAuto-check passed

More from manaflow-ai/cmux

All 22 skills in this repo
  • cmux Diagnostics

    manaflow-ai/cmux

    Runs a read-only health check for cmux and explains what it finds, covering the CLI and socket, settings, agent hooks, session restore and notifications.

    28k GitHub starsUsed in 1 repo~819 tokens
    Auto-check passed
  • cmux Settings Editor

    manaflow-ai/cmux

    Reads and changes cmux preferences in `~/.config/cmux/cmux.json` through a helper that validates each change before writing, covering terminal, browser, viewers and shortcuts.

    28k GitHub stars~2.3k tokensUpdated today
    Auto-check passed
  • cmux Backend Rules

    manaflow-ai/cmux

    Sets the backend TypeScript and Cloud VM rules for cmux: Effect-based services, thin route handlers, Postgres as source of truth, migrations and provider secrets.

    28k GitHub starsUsed in 1 repo~682 tokens
    Auto-check passed
  • Cmux Debugging Guide

    manaflow-ai/cmux

    Covers debug logging, the Debug menu, profiling rules and runtime pitfalls for working on the cmux macOS terminal app.

    28k GitHub starsUsed in 1 repo~1.1k tokens
    Auto-check passed
  • Workflow rules for the Ghostty submodule in cmux: rebuilding GhosttyKit.xcframework, pushing fork changes and updating the parent submodule pointer safely.

    28k GitHub starsUsed in 1 repo~580 tokens
    Auto-check passed
  • Cmux Release Workflow

    manaflow-ai/cmux

    Runs the cmux release process: gathers per-PR changelog lines since the last tag, bumps the version, guards against a bad tag, then tags and pushes the macOS DMG release.

    28k GitHub starsUsed in 1 repo~856 tokens
    Auto-check passed

Works with

Categories

Questions about cmux Socket Policy

What does cmux Socket Policy do?

Sets threading and focus rules for adding or changing cmux socket and CLI commands, so telemetry stays off the main thread and automation never steals app focus. sync.async.

When should I use cmux Socket Policy?

cmux Socket Policy fits situations like: adding a new socket command to cmux; changing CLI commands that could pull focus to the app window; writing telemetry commands that update status or progress frequently; allowlisting a method for the remote relay.

How do I install cmux Socket Policy in Claude Code?

Run `npx skills add manaflow-ai/cmux --skill cmux-socket-policy -a claude-code`. Or copy the skill folder (skills/cmux-socket-policy in manaflow-ai/cmux) into .claude/skills/cmux-socket-policy in your project. Claude Code loads it when a task matches its description.

How do I install cmux Socket Policy in Codex?

Run `npx skills add manaflow-ai/cmux --skill cmux-socket-policy -a codex`. Or copy the skill folder (skills/cmux-socket-policy in manaflow-ai/cmux) into .agents/skills/cmux-socket-policy in your project. Codex loads it when a task matches its description.

Can I use cmux Socket Policy in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add manaflow-ai/cmux --skill cmux-socket-policy -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/cmux-socket-policy, .gemini/skills/cmux-socket-policy, .github/skills/cmux-socket-policy and .opencode/skills/cmux-socket-policy in your project.

What does cmux Socket Policy need to run?

SKILL.md names no scripts, command-line tools or credentials: cmux Socket Policy is instructions for the agent only. Our summary lists: The cmux repository.

Does cmux Socket Policy access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is cmux Socket Policy safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does cmux Socket Policy use?

cmux Socket Policy has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does cmux Socket Policy use?

About 631 tokens (SKILL.md is roughly 2.5k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 1.2k tokens, read only when the agent opens those files.

What are the alternatives to cmux Socket Policy?

Skills that share tags, products or a category with cmux Socket Policy: Architecture Patterns (KartikLabhshetwar/better-shot, 2.4k stars), Akka.NET Best Practices (Aaronontheweb/dotnet-skills, 1.2k stars), Exa Reference Architecture (jeremylongshore/tons-of-skills-marketplace, 2.8k stars) and macOS Development (KartikLabhshetwar/better-shot, 2.4k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains cmux Socket Policy?

manaflow-ai (a GitHub organization) maintains it in manaflow-ai/cmux, which has 28,076 GitHub stars. The repository holds 22 skills in this directory. The repository was last updated on October 10, 2026.

Source: manaflow-ai/cmux on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.