serving-llms-on-epyc

The code is an environment-validation utility, with no evident malware behavior or data exfiltration. However, the unquoted --image argument reaches shell=True commands, allowing command injection when an attacker can control that CLI argument. Quote or validate the image value and preferably invoke subprocess with argument lists and shell=False.