agnost-ai

No direct evidence of self-contained malware is present in this wrapper. However, it executes multiple sibling scripts via execFileSync (delegating substantial behavior to other modules) and it can disclose sensitive information by printing instrumented.env key/value pairs and other child-derived metadata to stdout. Additionally, there is an abnormal trailing empty argument in the instrument.mjs invocation that warrants review. Overall, treat this as a legitimate-but-privacy-sensitive CLI with moderate risk pending verification of child scripts’ network/exfiltration behavior and the contents of instrumented.env.