nightly-eval-investigation

No clear signs of overt malware are present in this fragment. The dominant concern is security of the automation environment: it heavily uses `execSync` with template-literal shell commands that interpolate potentially external variables (especially parent/sub-issue URLs). Without strict sanitization/escaping, this creates a plausible command-injection/sabotage path in CI/runner contexts. Separately, parsed audit text is propagated into GitHub issue bodies and project fields, which can enable integrity abuses (malicious content in downstream operational artifacts).