npu-torchair-infer

This bash wrapper itself does not show obvious malicious payload behavior (no exfiltration/persistence/backdoor code), but it materially increases supply-chain risk. It can download model artifacts from a configurable mirror without cryptographic integrity verification, and it can enable remote repository code execution via --trust_remote_code passed into the local Python runners. Treat MODEL inputs, HF_ENDPOINT, and TRUST_REMOTE_CODE as high-risk controls; review the referenced Python scripts and ensure trusted, verified model sources (or disable TRUST_REMOTE_CODE by default).