augur

This is a proof-runner that snapshots source and executes caller-supplied Bash setup/proof scripts, optionally testing them against patched copies. It contains no direct credential theft, suspicious network destination, or destructive behavior in the supplied code. The scripts it runs are not sandboxed and inherit most environment variables and the caller's filesystem/network privileges, so untrusted scripts could access credentials or modify the host; severity is high when inputs are untrusted and low when scripts are reviewed and trusted. It also retains temporary snapshots and logs.