atlas

No direct signs of embedded malware (no network calls, no credential theft/exfiltration, no obfuscated payload decoding, and no eval/exec/persistence in this module). However, this is a high-impact workflow adapter that validates a manifest and then executes subprocess argv defined by the installed skill and its manifest—so the main security risk is supply-chain arbitrary code execution if the installed skill/manifest is malicious. Path/template/state integrity checks provide guardrails but do not sandbox or restrict the executed programs beyond limited path/script checks.