revit-automate-test

The script appears to be a project-template smoke test, not malware. Its WorkRoot validation has a path-boundary flaw: paths equal to TEMP or beginning with the TEMP string can pass and then be recursively deleted. Use a canonical, separator-aware descendant check and prevent deletion of TEMP itself. Only run the package and build steps with trusted inputs.