delegate-review

The code is an AI-task delegation wrapper with extensive process, filesystem, credential, and MCP handling. It presents significant security risk because it stages authentication material and launches external agents with broad permissions, sometimes defaulting to full-access or bypass-permission modes. Those behaviors appear functionally related to the stated wrapper purpose and include cleanup, ownership checks, bounded parsing, and some secret redaction. No direct malicious exfiltration, backdoor, obfuscated payload, cryptomining, or destructive sabotage is evident in the shown portion. Deployment should require trusted requests, trusted PATH binaries, tightly controlled MCP configuration, restricted sandbox settings, and careful validation of all caller-supplied paths.