orgbrain

The system involves cloning repositories and executing `git` commands, which inherently carries risks if interacting with untrusted code. The `GitManager` explicitly sets `GIT_SSH_COMMAND: "ssh -o BatchMode=yes -o StrictHostKeyChecking=no"`. Disabling `StrictHostKeyChecking` bypasses host key verification for SSH connections, making the cloning process vulnerable to Man-in-the-Middle (MITM) attacks if the git remote server is compromised or impersonated. While this prevents interactive prompts and might be acceptable in tightly controlled environments (e.g., trusted CI/CD against a trusted GitHub instance), it is a significant security consideration for a general-purpose tool.