relay-dispatch

SUSPICIOUS. The skill’s behavior mostly matches its purpose, and the scanner finding is benign documentation syntax. Risk comes from delegating prompts, repo context, and ambient auth to multiple preinstalled external executor CLIs with limited provenance guarantees and possible network egress; this is a high-trust orchestration skill rather than clearly malicious content.

No direct malicious behavior or obfuscation is evident. This is a readable CLI adapter. It has meaningful operational security risks because it invokes an external agent with auto-approval, inherited process scope, no native filesystem isolation, and advisory-only worktree restrictions. RELAY_CLINE_BIN is an intentional extensibility point but should be trusted and controlled. Confidence is high for the code-level assessment, while the actual safety of the invoked Cline process cannot be determined from this fragment alone.