devcontainer-setup

No direct malware is evident in the supplied templates. The primary risks are intentional exposure of the host ~/.claude directory and broad workspace mounts, root-level symlink manipulation, and unvalidated command/image placeholders that could become arbitrary code execution if attacker-controlled. Review generated values and avoid mounting sensitive host configuration into untrusted containers.