warp-delegate
Warn
Audited by Socket on Aug 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is internally consistent and uses Warp's official CLI, so it does not look malicious, but it delegates powerful unsandboxed code execution and sends conversation/workspace data to Warp by design. The main risk is broad delegated authority and outbound code/context flow, not deceptive installation or hidden exfiltration.
Confidence: 91%Severity: 66%
Audit Metadata