unraid

This is a command-line GraphQL client, with no evident malware, persistence, or unrelated data collection. Its significant security concern is that curl disables TLS verification and follows redirects while the request carries an API key, potentially exposing the key to an unintended endpoint. The query is also inserted into JSON without escaping, which can break request formatting. Severity is moderate; use only with a trusted URL and consider enabling TLS verification and safely encoding the JSON body.