create-webroles

The code appears to be a legitimate role-generation CLI, but it has input-validation weaknesses. The user-controlled role name can influence both the YAML document and output path, creating a potential YAML injection/corruption issue and possible path traversal or unintended file overwrite. The project root is also fully caller-controlled by design. No clear malware, data exfiltration, or backdoor behavior is present in this fragment. Remediation should validate the role name against a safe filename pattern, reject path separators and dot segments, quote or safely serialize YAML values, and verify the resolved output path remains within the intended directory.