agy-delegation-workflow

SUSPICIOUS: the skill’s purpose is coherent with delegating coding work to agy, and the external CLI appears to be the official same-org tool with documented installs. However, the skill normalizes running that external agent with --dangerously-skip-permissions, giving a background process broad autonomous access without approval. No direct credential theft or off-purpose exfiltration is shown, but the approval bypass makes the overall skill higher-risk than a normal workflow guide.

No direct malware behavior is evident in this script. Its main security concern is delegating user-supplied task content to agy with --dangerously-skip-permissions, which can permit consequential actions by the CLI. Use only with trusted prompts and an appropriately isolated workspace.