dstack-core

This module is a high-risk workflow launcher: it executes an arbitrary caller-supplied Python file via runpy.run_path and also prepends the target directory to sys.path, which can enable import shadowing. The fragment itself shows no explicit malware behaviors (e.g., exfiltration, backdoor logic, or credential theft), but it creates an execution primitive that becomes dangerous if the workflow path and its directory are not strictly controlled and trusted.