ln-030-vps-bootstrap

No explicit indicators of classic malware behavior are present in this fragment (no reverse shells, no direct network calls, no obvious credential theft code, no persistence/backdoor logic beyond standard systemd/tmux lifecycle). The main supply-chain security concerns are configuration-driven and impact-amplifying: the script runs Claude with --dangerously-skip-permissions and executes a shell command via tmux that interpolates an unquoted ${PROJECT_DIR} (a command-injection risk only if that value can be influenced). Overall, malicious probability is low, but the security risk is moderate due to permission weakening and the sensitivity of local command/secret inputs.