warp-delegate

SUSPICIOUS: the skill is internally coherent for agent orchestration and uses Warp's official Oz CLI rather than a fake proxy, so it is not malware. However, it enables an unsandboxed external agent with local command execution, forwards auth to a third-party CLI/service, may upload workspace snapshots by default, and is distributed as a community skill with transitive installation trust; these make it a high-impact but not clearly malicious skill.