agent-optimiser

This is an automation and measurement script, not direct malware. Its main security concern is unsafe execution: caller-controlled tasks are run by Claude in a caller-controlled directory with --dangerously-skip-permissions. Direct malicious behavior is not evident, but misuse or a malicious task/agent definition could result in arbitrary filesystem or command actions. Unsanitized label-based paths create an additional file overwrite/path traversal risk. The quoted heredoc contains a likely bug that prevents correct summary-path resolution.