eval-author-discover

No clear malware, credential theft, or data exfiltration is shown. There are path-confinement concerns: `.`/`..` task IDs can escape the intended output directory, and preserved symlinks may redirect generated writes. The shown fragment is incomplete and cannot run as provided.