prompts-workflow

This module is not overtly malicious on its own (no network calls, credential theft, or embedded backdoor behavior). However, it is a high-impact command-execution orchestrator: it synchronously executes local shell/Python scripts via execSync and one script path depends on an environment-controlled root (CLAWD_ROOT). If an attacker can influence CLAWD_ROOT or the referenced scripts on disk, they can replace payload code and achieve arbitrary execution with the node process privileges. Review and lock down the runtime environment and script integrity (e.g., immutable deployments, signature/hash verification, least privilege).