lab-hardware-cad

This module is primarily a CAD validation/plugin runner, not an obvious malware sample. However, it contains a high-impact supply-chain/security risk: it dynamically executes arbitrary local Python model files provided by a caller (exec_module) and temporarily alters sys.path during that execution. Schema validation of interfaces/checks improves robustness but does not protect against malicious code executed at import/build time. If model_path inputs are not strictly trusted/allowlisted, treat the overall functionality as equivalent to running untrusted code within the hosting process.