Make sure that you trust your sources before putting something like this in your workflow. I'd guess that these scripts are easily exploitable. A suitably malfo

Make sure that you trust your sources before putting something like this in your workflow. I'd guess that these scripts are easily exploitable. A suitably malformed patch gives an attacker a remote code execution on your machine! Obviously not a worry if you know your sources or your project isn't open to all. It's just that with something like this set up, it would be tempting to use it to pre-filter changes before you do a 'proper' review of the code, and by that time it's too late...