agtask

This configuration is a high-impact hook dispatcher that executes a local Python script via a command-sink on multiple session/user lifecycle events. The snippet itself shows no credentials, network behavior, or obfuscation, but it creates repeated automatic external process execution using a hardcoded user-specific absolute path—an important anomaly that warrants inspection of the referenced `agtask` script and its provenance/integrity before trusting the package.

This module is a thin entrypoint that immediately replaces the current process with execution of a package-local sibling artifact ("agtask") using the subcommand "uninstall-hooks" and forwards all remaining CLI arguments verbatim. The snippet itself shows no direct malware behavior (no network, credential, or exfiltration logic), but it performs high-impact delegation at top-level execution, so the overall security posture depends on what the "agtask" artifact actually does. Review the "agtask" implementation to confirm it is a legitimate uninstaller/cleanup routine and that forwarded arguments cannot be abused.

This file is a thin but security-relevant process launcher: it replaces the current process to run a sibling component (`agtask`) with an `install-hooks` action and forwards all user-supplied arguments without validation. The snippet alone does not prove malware or data theft, but the execution pivot to an installation/persistence-like routine is a meaningful supply-chain/sabotage risk that requires inspection of the `agtask` artifact to confirm intent and impact.