qoder-delegate

SUSPICIOUS. The core purpose is coherent with using Qoder CLI to implement code, and data flow to Qoder is proportionate to that purpose. Risk comes from dependency on external CLIs, including one transitive helper, plus credential forwarding and remote code assistance through vendor tooling; however, the docs and endpoints appear official rather than obviously deceptive. Human review/commit boundaries reduce autonomy risk, but supply-chain and third-party execution risk remain material.