Hacker News Reader

I agree, this isn't a vulnerability at all. Now that it's public, I'm not even sure I would do anything about it if I were them.

You think opening a git repo I just cloned should execute code in that repo?

Maybe powershell shouldn't include the current directory in the PATH.