delegating-to-agents

SUSPICIOUS: the skill's delegation purpose is coherent, but it normalizes reduced-approval execution (`--yolo`, `bypassPermissions`) and remote orchestration of external agents. There is no clear credential exfiltration or malicious endpoint, so this is not malware, but it materially increases operational risk and autonomy beyond a low-risk coordination skill.