project-management

The script performs project setup and Matrix room administration, but unvalidated project and worker identifiers create path traversal risks; worker-derived credential files are sourced as executable shell code, creating a potential command-execution risk if an attacker can control those inputs or matching files. Direct JSON interpolation also permits malformed or manipulated API requests, and --grant-admin can intentionally grant room-admin privileges. No unrelated network destination or clear credential exfiltration is evident; overall severity is medium, with risk dependent on input access and filesystem permissions.

This is project-management guidance, not executable package code, and it contains no direct evidence of malware or credential theft. Its significant security concern is an explicit YOLO-mode path that uses AGENTTEAMS_YOLO or ~/yolo-mode to bypass human confirmation, activate a project, change permissions and allowlists, invite users, and sync files with --overwrite. Severity is elevated if an agent executes these instructions without independently verifying authorization and the referenced script's behavior; no domain, URL, IP address, or credential target is specified.