engineer-expertise-extractor

The script is intended to research public GitHub contributions and generate a local engineer profile. It contains a high-impact command-injection vulnerability because prompt input is evaluated with `eval`. It also has argument quoting, input validation, JSON parsing, and generated-file integrity weaknesses. No clear malware, credential theft, persistence, reverse shell, or covert network exfiltration is evident, but the script should not be used without removing `eval`, validating inputs, consistently quoting arguments, and using a JSON parser.