warp-delegate

Warn

Audited by Socket on Aug 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is internally consistent and uses Warp's official CLI, so it does not look malicious, but it delegates powerful unsandboxed code execution and sends conversation/workspace data to Warp by design. The main risk is broad delegated authority and outbound code/context flow, not deceptive installation or hidden exfiltration.

Confidence: 91%Severity: 66%
Audit Metadata
Analyzed At
Aug 16, 2026, 08:02 PM
Package URL
pkg:socket/skills-sh/amelnagdy%2Fdelegate-skills%2Fwarp-delegate%2F@6a4c65165e8db65ee9269cbbe7d04fccc7f62d94f15f82b4e0fee56d10d26f06
Security Audit — socket — warp-delegate