github-release-management

No clear malware is present in this documentation. The main concerns are the unpinned claude-flow alpha execution in privileged release workflows, direct shell interpolation of a tag value, and exposure of publishing credentials to workflow steps. These are conditional workflow supply-chain and command-injection risks; repository access controls and omitted configuration affect exploitability.