delegate

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
references/cli-invocations.md

The fragment is a security-conscious CLI dispatch specification with appropriate warnings about shell injection and stdin handling. It contains no apparent malware, obfuscation, hardcoded secrets, or covert exfiltration. However, several provider commands deliberately bypass approvals or sandboxing and run in the caller's working directory, creating a substantial execution-authority risk when prompts, repositories, or CLIs are not fully trusted.

Confidence: 96%Severity: 68%
Audit Metadata
Analyzed At
Sep 22, 2026, 12:47 PM
Package URL
pkg:socket/skills-sh/sungjunlee%2Fskills%2Fdelegate%2F@77b26d9b7949dc64d3d9b77044e3b1eee5c51fa49b0f878d27655441fe50e74d
Security Audit — socket — delegate