visual-companion

This script stops a process whose command line matches an ID stored in the supplied session directory, then removes state and potentially the entire session directory. Its /tmp prefix check does not prevent traversal or canonical-path escape, so a crafted SESSION_DIR such as /tmp/../../<target> can cause recursive deletion outside /tmp; this is a serious destructive path-handling risk. It contains no evident data exfiltration or other malware behavior.