personatwin

The workflow has a command-injection vulnerability through direct interpolation of the manually supplied version into a shell script. A crafted dispatch input could execute commands on the runner and potentially misuse the job's contents: write permissions. Pass the input through an environment variable and validate it before use. The fragment does not otherwise show clear malware behavior.