do-work

SUSPICIOUS: the stated purpose is a workflow executor, but its actual footprint is much broader because it grants unrestricted shell access and wildcard transitive skill execution. There is no direct evidence of malware or credential theft in this snippet, yet the scope is disproportionate to a simple work-item runner and the trust boundary is opaque.