One coverage tracker used something like this for recommended CI setup, script was hijacked, users were advised to rotate all credentials available in CI.