experiment-queue

No clear evidence of embedded malware (no exfiltration/backdoor/cryptomining) in the fragment, but it is a highly privileged job runner that executes attacker-influenced shell strings via shell=True, uses eval-based conda hook resolution from env/manifest without validation, and launches arbitrary job['cmd'] verbatim. In a supply-chain context, a malicious manifest/dependency configuration could lead to arbitrary command execution and sabotage. Treat as high-risk if manifest/environment are not fully trusted.