sdlc-test

This is a project verification runner that executes configured build/startup commands, sends health and smoke-test HTTP requests, and writes local logs and reports. Its principal risks are shell execution of configuration-controlled commands, configurable network destinations that may receive local auth headers, and an unvalidated request identifier used in filesystem paths. No fixed malicious infrastructure or clear malware behavior is present; severity is context-dependent and significant if project configuration or arguments are attacker-controlled.