auto-permissions-review-install

No clear malware is present. This is a permission-review hook with security weaknesses: its Bash allowlist can approve compound commands, review failures fail open, and unvalidated session IDs and logging/model submission create path and data-exposure risks. Review and harden before relying on it to enforce permissions.