motherduck-build-data-pipeline

The code is a readable database cleanup utility whose intended behavior is to connect to MotherDuck and delete a configured database. It does not show clear malware or supply-chain attack behavior. The principal security concern is destructive execution combined with unsafe interpolation of the database name into SQL, which can permit SQL injection or deletion of an unintended database if settings are attacker-controlled. The token is used for the expected database connection and is not otherwise exposed.