pandaai-workflow-generator

This module itself contains no standalone malware behaviors (no networking, no subprocess execution, no obfuscation, no credential theft). However, it is a powerful workflow assembler that intentionally embeds attacker-controlled Python source verbatim into CodeControl node fields within a generated workflow JSON, and it writes attacker-influenced templates/parameters/code to an attacker-chosen output path. Therefore the dominant risk is supply-chain-style misuse: if the produced workflow is executed by a downstream system that runs CodeControl contents, it can enable arbitrary code/backdoor logic in that downstream environment. Additional operational risk exists from unrestricted filesystem reads/writes (template/code/param inputs and --out).