autoreview

This is a local security-review harness that deliberately generates a high-risk malicious fixture containing a destructive execSync(rm -rf ...) sink with untrusted interpolation and a sensitive-data exposure pattern (returning password). The harness itself mainly performs repo setup and invokes an external review tool; it does not execute the fixture. Overall risk is driven by accidental execution or reuse of the malicious fixture code rather than covert malware or network-based compromise in the harness itself.