tiangong-kb-course-fulltext-fetch

The script itself shows no direct malware behavior (no explicit exfiltration or stealth), but it is a high-impact execution/conduit wrapper: it can fetch and run a runtime-resolved dependency (`npx ...@latest`), allows the executed command to be overridden via environment variables, and exports variables from a caller-supplied env_file into the CLI’s environment. These factors create meaningful supply-chain and configuration-driven risk. Additionally, when output redirection is enabled, fetched content is written to a caller-controlled path and may be leaked to stderr on failure.