delegate

SUSPICIOUS: the skill is purpose-aligned as a delegation/orchestration tool, but it has a broad execution footprint and intentionally forwards local task context to multiple external model CLIs. Install provenance appears mostly official rather than deceptive, so this is not confirmed malware; the main concerns are medium supply-chain risk, transitive agent trust, and routine exfiltration of code/task context to third-party services.