herdr-delegate

SUSPICIOUS: the skill’s purpose is coherent, but it installs another remote skill at runtime via a third-party CLI, creating a transitive trust chain with reduced user review. No direct credential theft or exfiltration is shown, but the delegated-agent and skill-to-skill install pattern makes the overall security risk medium-high.