remote-gpu-trainer

This wrapper is operationally a queue runner, but its primary security concern is the eval-based execution of PROXY_HOOK (environment-controlled “snippet”), which can enable arbitrary command execution if an attacker can influence PROXY_HOOK or the /etc/network_turbo content. Independently, the queue file’s cfg/task/epochs are passed as arguments into an external runner script; while that is expected for job orchestration, it expands the impact of a malicious or untrusted queue. No direct evidence of credential theft, persistence, cryptomining, or network exfiltration is present in this fragment alone; risk is dominated by the eval primitive and trust-boundary expansion into downstream execution.