greenlight-review

No credential harvesting, external data routing, installer, or executable payload is specified. The main risk is that an AI-generated LAND verdict can enable automatic merging; tool restrictions and explicit untrusted-input handling reduce, but do not remove, that risk.