zj-initiative-registry

No explicit malware behavior is present in this wrapper. The primary security concern is that it executes Python code from a repository checkout specified at runtime, relying only on a weak origin-URL comparison gate provided by the caller. In threat models where an attacker can influence --registry-path or the local git remote configuration, this can enable arbitrary code execution via scripts/<...>.py (supply-chain/unauthorized-code-execution risk).