sverchok-impl-extensions

No direct malicious payload (e.g., exfiltration, backdoor, credential theft, reverse shell) is evident in the provided snippets. The dominant security concern is supply-chain risk: a UI/operator-driven installer runs `python -m pip install` using a string that is not shown to be strictly allowlisted/pinned/verified, enabling installation and future execution of arbitrary third-party code. Dynamic module importing for node registration adds additional execution surface typical of plugin systems, but no attacker-controlled input is shown for module paths in these examples.