scenario-zbrush-expert

This is an agent bridge that intentionally accepts code over localhost and executes it with the privileges of the running application. The loopback binding limits direct remote access, but the lack of authentication and the unrestricted exec make it a significant local security risk if untrusted local processes can connect. The code does not itself demonstrate malicious intent or a specific exfiltration payload.