work-review

This is operational documentation for an issue-review automation workflow, not evident malware. It contains no direct data exfiltration or persistence behavior. The principal security risk is arbitrary command execution through eval of configuration-derived install and verify commands, with secondary destructive-operation and jq-injection risks. Configuration values and deletion paths require strict trust boundaries and validation before use.