hypura-harness

SUSPICIOUS. Local VOICEVOX and VRChat control are plausible for the stated purpose, but the mandatory repo-local Python executable is unverifiable and the '/evolve' self-modification capability is broader than a normal actuator bridge. No clear credential theft or external exfiltration is shown, so this is high security risk rather than confirmed malware.