delegate
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
AnomalyAnomalyreferences/cli-invocations.md
LOWAnomalyLOW
references/cli-invocations.md
The fragment is a security-conscious CLI dispatch specification with appropriate warnings about shell injection and stdin handling. It contains no apparent malware, obfuscation, hardcoded secrets, or covert exfiltration. However, several provider commands deliberately bypass approvals or sandboxing and run in the caller's working directory, creating a substantial execution-authority risk when prompts, repositories, or CLIs are not fully trusted.
Confidence: 96%Severity: 68%
Audit Metadata