is using the line "Exclude Nodes" in torrc file a security problem?

It makes your anonymity worse.

i mean anyway, how does this work, how does my tor-client decide whats slow or not? which bandwidth limit does it use for sorting out?

Please ask general Tor questions on the Tor support channels, thanks :)