venv-manager

The code appears to implement a virtual-environment manager, not covert malware. The main security issue is that the run command permits path traversal or absolute paths to execute scripts outside the selected skill directory. The fallback installer is also executed without integrity verification. Treat skill metadata and packages as trusted inputs, and restrict script paths to the skill directory.