limits-setup

No clear evidence of embedded malware such as network exfiltration, reverse shells, or cryptomining in this fragment. The main security concern is the high-impact trust boundary introduced by dot-sourcing the local config file (`. "$CONF"`)—if the config (or its location via AI_LIMITS_DIR) is attacker-controlled, running the script can execute arbitrary commands as the user. Otherwise, the script primarily performs local config/state updates and logs with an interactive typed confirmation gate for administrative changes.