digdag

No direct malicious behavior or data exfiltration is evident. The main security risk is the runtime os.system() pip-install pattern, which executes dependency installation code from requirements.txt on every run and can permit arbitrary code execution if dependencies or the requirements file are compromised. Use pinned and integrity-verified dependencies, avoid shell invocation where possible, and restrict container credentials and network access.