granola-ci-integration

The code implements a plausible meeting-automation integration and contains no clear malware or obfuscated payload. However, it has significant injection risks because untrusted repository_dispatch fields are interpolated directly into shell and JavaScript code. Payload values should be passed through environment variables or files, safely encoded, validated, and used without direct source interpolation; workflow permissions should also be least-privilege.