cline-delegate

SUSPICIOUS. The skill’s capabilities mostly match its stated delegation purpose and it uses the official Cline install path, so this is not confirmed malware. However, it grants a secondary authenticated coding agent authority to execute implementation work with auto-approval by default, leaves sandboxing unenforced, and depends on an external CLI that has had a documented supply-chain incident, making the overall security risk high despite coherent intent.