feat: Add /delegate skill — hand off findings to other agents via Delega

[ryanmcmillan]

What

Adds a /delegate skill that bridges single-agent gstack workflows with multi-agent orchestration via Delega. After /review, /qa, or /cso produces findings, /delegate creates tracked, assigned tasks for other AI agents.

Why

gstack skills are excellent at finding issues. But the agent that finds a bug isn't always the right agent to fix it. /cso finds a SQL injection — that goes to your security agent. /qa finds a broken checkout flow — that goes to your frontend agent. /review finds a missing test — that goes to whoever handles testing.

/delegate closes the loop: one agent reviews, another agent gets a tracked task with full context (file, line, severity, confidence, recommended fix, branch).

How it works

1. Gather — parses .gstack/security-reports/, .gstack/qa-reports/, or conversation context
2. Plan — shows delegation plan via AskUserQuestion (never auto-creates)
3. Create — creates Delega tasks via MCP tools (preferred) or CLI
4. Summary — shows task IDs, priorities, assignments, and tracking command

Setup

Requires Delega MCP server or CLI:

# MCP (preferred)
npx @delega-dev/mcp

# CLI
npm i -g @delega-dev/cli && delega init

Files

• delegate/SKILL.md.tmpl — source template (follows gstack conventions)
• delegate/SKILL.md — generated skill file
• README.md — added /delegate to all 4 skill lists
• docs/skills.md — added skill table entry + full documentation section with example

Example

You:   /cso
Claude: [runs full OWASP + STRIDE audit, finds 4 issues]

You:   /delegate --agent @security
Claude: Created 4 tasks, all delegated to @security.
        Track progress: delega tasks list --labels cso