mailbox

No clear evidence of intentional malware (no exfiltration, no backdoor execution, no network activity) is present in this Bash utility. However, it has a meaningful security weakness: AGENT is used verbatim in filesystem paths for mkdir/cat/echo/cp/mv without normalization or confinement, enabling potential out-of-scope file targeting if untrusted input reaches this script. It also persistently stores attacker-controlled Markdown that is later printed via read/load, which can poison downstream prompts/instructions.