frontend-audit

This file is primarily a model-execution CLI wrapper, but it contains a critical supply-chain risk: it downloads a remote repository at runtime and then executes its code by modifying sys.path and importing EndpointHandler from the downloaded content. The wrapper does not pin a specific revision or verify integrity, so tampering or upstream changes could result in arbitrary code execution under the user’s privileges. The fragment itself shows no direct malware behavior (no obvious exfiltration, subprocesses, or obfuscation), though it may leak the absolute input image path via stdout/stderr.