agent-delegation

SUSPICIOUS. The skill’s behavior is largely aligned with its stated purpose as a delegation policy, and there is no clear credential theft or covert exfiltration. However, it materially increases operational risk by instructing the agent to hand code and repo context to multiple external CLIs and to take autonomous write actions across them, so it is best classified as medium-risk rather than benign.