kelly-clm

No overt malicious behavior is evident (no obfuscation, no dynamic execution, no system command execution, no direct credential exfiltration). However, the tool performs a high-impact bulk operation: it recursively reads and uploads nearly all files under a fixed application directory to a remote service. This is primarily a supply-chain/data-leak risk if the directory contains unintended sensitive artifacts (secrets, keys, internal configs) that are not excluded by the limited skip list. Review appRoot contents and add stronger allowlisting/secret-exclusion controls if used in sensitive environments.