vfx-video

This module is a visual validation/diagnostic CLI, not a self-contained malicious payload. However, it performs high-impact dynamic code execution by loading and executing a Python file specified by the caller (`exec_module` + calling `build()`). If the `project` input is not strictly trusted (supply-chain or user-controlled path), the tool provides an arbitrary code execution capability. Beyond that, the remainder is image/alpha/contrast/overlap heuristic logic with no direct exfiltration mechanisms shown in this snippet.

This module is not overtly malicious in itself (no visible exfiltration/network behavior), but it functions as a high-impact arbitrary code execution runner: it loads and executes a Python file specified by the CLI argument (spec.loader.exec_module) and then calls build()/build_comp() from that executed module. It also writes output media files to user-influenced filesystem paths. If args.project is not strictly controlled/trusted, this represents a substantial supply-chain and host-compromise risk.