atlas-action

No malware is present in the supplied documentation. The described commit workflows carry a meaningful credential-exposure risk because branch-controlled workflow or schema code can run in a job with a repository write token. Use only a narrowly scoped token where branch contributors are trusted, constrain permissions and staged files, and pin third-party actions to reviewed commit SHAs.