delegate-to-agent

SUSPICIOUS: the skill’s stated purpose is coherent, but it promotes routing arbitrary app content into a highly privileged agent and supports auto-submission. Main concerns are agent autonomy and untrusted-content delegation, plus unverifiable provenance for @agent-native/core from the provided evidence; there is no clear credential theft or exfiltration behavior.