Intuneomator

The Intuneomator codebase includes automation patterns that are legitimate for management tooling but introduce security risks if inputs or build environments are compromised. Key concerns are: (1) eval-based parsing of label data enabling potential code injection; (2) automated modification of build configuration to inject a shell script during builds, which could be abused in a compromised CI/dev environment; (3) remote download logic that, if not properly validated, could lead to remote code execution via manipulated labels. No hard-coded secrets or credential theft patterns are evident in the provided snippets.