review

No explicit malicious payload is evident in this wrapper itself. The main security concerns are (1) use of `eval` to derive HOME (shell execution-risk smell) and (2) execution of a local script under `$HOME` without verification, combined with piping potentially untrusted prompt content into that runner (prompt-injection/control influence risk). Review the integrity of `$HOME/.claude/shared/companions/runner.sh` and ensure it does not execute arbitrary commands based on prompt content.