video-production

This is a configurable gate runner that executes commands supplied by gates JSON through a system shell, so a malicious or untrusted configuration can execute arbitrary commands with the process's privileges; unescaped path substitutions can also affect shell interpretation. The code contains no fixed malicious command, network exfiltration, or credential targeting. Security risk is high when configuration or substituted paths are untrusted, but the behavior is consistent with a command-based verification runner.