director

SUSPICIOUS: The workflow purpose is coherent and mostly local, but its core footprint relies on multiple unverifiable or community-hosted model artifacts and a third-party custom node without clear same-org provenance or validation steps. I found no direct credential theft, exfiltration, or hidden execution, so this is not confirmed malware; the main risk is supply-chain trust.