linkly-ai

The workflow has a significant command-injection risk: a user able to push a matching crafted tag may execute shell commands in the release workflow. Because later steps can access the persisted R2 credentials and the workflow has write permissions, this could enable release or storage compromise. Restrict tag creation and pass tag-derived values through environment variables with validation; avoid direct expression interpolation into shell scripts.