model-selector

The fragment appears to be a legitimate local grading pipeline, not malware. It contains no clear credential theft, network exfiltration, destructive behavior, or obfuscated payload. However, it deliberately executes a command supplied by the bridge subprocess without executable allowlisting, so compromise of selection.py, its configuration, or its output can result in arbitrary local command execution. Review the bridge trust model and protect pending data and configuration files.