grok-delegate

SUSPICIOUS: the core purpose and Grok integration are coherent, and the official xAI npm install path is consistent with the stated function. The main risk comes from delegated autonomous code changes plus the optional third-party codex-background skill installation, which extends trust beyond xAI and creates a transitive execution path not necessary for the core Grok workflow.