git-workflow-management

No evidence of intentionally malicious payloads (no obfuscation or data theft/exfiltration logic). However, this is a high-privilege repository control surface: untrusted stdin parameters directly drive destructive and state-changing git operations (checkout, pull, create, merge, and force deletion) via subprocess. The lack of strict validation/allowlisting for ref names/base branches introduces an argument/option-parsing misuse risk within git semantics (e.g., refs starting with '-') and enables sabotage if the tool is reachable outside a trusted environment.