ghost-scan-code

This is an orchestration script for dispatching Claude-based scanning workers over files and tracking unfinished work. It contains no clear malware or direct data exfiltration. The principal risks are prompt injection and path traversal through the unvalidated prompt argument, because the external claude process receives write-capable tools and follows a dynamically selected instruction file. The supplied code also contains an apparent syntax error at the final echo statement, which would prevent execution. Review and constrain prompt, path, and input values before use, and fix the unterminated quote.