sub-agents

SUSPICIOUS: the skill is purpose-aligned for sub-agent delegation, and most command-injection findings are documentation artifacts, not hidden execution. However, it intentionally forwards tasks to multiple external CLIs, recommends elevated permissions, and supports approval-bypassing modes; with mixed provenance across supported backends, this creates a medium trust and execution risk disproportionate to a simple orchestration helper.