git-delegation

SUSPICIOUS: the stated purpose is coherent, but the actual footprint is broader than "git delegation" because the Manager is instructed to run arbitrary shell commands bundled with git operations. Data flows and tooling are mostly same-ecosystem and expected for AgentTeams, so this is not confirmed malware, but it creates meaningful command-execution and repo-impact risk on the Manager side.