soia-dev-agent-cli-dispatch

SUSPICIOUS: the stated purpose matches an AI CLI dispatcher, but the footprint is broad and high-trust. The main concerns are transitive skill installation, wildcard agent permissions, approval-bypass execution modes, and sending potentially sensitive repo/context data into multiple external AI CLIs capable of writing code or taking actions.

No clear embedded malware indicators are present in this fragment (no persistence, credential theft, network exfiltration, or obfuscated payloads). However, the module is a high-risk execution orchestrator: it directly executes case-provided cmd_template strings via subprocess.run(..., shell=True) without validation, which can become arbitrary command execution if cases.json (or any resumed/derived inputs) are not fully trusted. Additionally, it modifies sys.path to import local modules, increasing impact if the local filesystem/package layout is compromised. Treat this code as dangerous to run with untrusted case definitions or in an untrusted working directory.