task-workflow

This module is a powerful lifecycle/orchestration runner rather than a stealth malware implant. It does not show clear signs of credential theft or hidden payload behavior, but it substantially increases security exposure because it executes caller-provided command strings using bash -lc (arbitrary command execution capability) and performs HTTP fetches to a caller-provided readiness URL. It also persists stdout/stderr to logs, which can leak secrets emitted by executed commands. Overall: likely legitimate for trusted CI usage, but high risk if inputs are not fully controlled.