run-tailscale-funnel

No clear indicators of malware such as exfiltration, reverse shells, or covert persistence appear in this snippet. The primary security issue is the high-impact `source "$STATE_FILE.previous"` call: because this file is stored in a temp directory (default /tmp) and is not permission/ownership validated here, any ability to tamper with that file can yield arbitrary command execution when the script runs. Funnel removal/restoration itself is scoped and guarded by an allowlist and state-file checks, though --force reduces that safety barrier.