waypoint

No clear malware or covert behavior is present. The CLI has path-validation weaknesses: untrusted specs can direct block writes to arbitrary existing files and manifest writes outside the intended directory. The code also contains a Python 3 syntax error in an exception handler and will not run as provided.