tinybird-cli-guidelines

The fragment contains no direct evidence of malware, credential theft, persistence, or destructive behavior. It does contain meaningful CI/CD security risks: remote installer execution, mutable dependencies, possible shell injection through unquoted branch names, command-line secret exposure, and potential production-data exposure in previews. Branch names should be validated or passed safely, installers and images should be pinned and verified, and tokens should not be placed in command arguments.