external-cannbot-ops-triton-task-extractor

No explicit malicious payload is visible in this module itself (no hardcoded secrets, suspicious domains, or direct exfiltration code). However, it is a high-risk component in a supply-chain context because it performs unsandboxed execution of the validated file via `exec(code, namespace)` and then instantiates/calls user-defined functions and model logic. If an attacker can influence the file being validated, they can achieve arbitrary code execution with the validator’s process privileges. Treat this as a security-critical design requiring strict trust boundaries/sandboxing.