assetseeker

No strong evidence of intentional malware/supply-chain sabotage is present in this fragment. However, it has notable security/abuse risks: (1) cmd_download enables downloading from any user-supplied URL and writing bytes to any user-supplied filesystem path (unrestricted file-write primitive); (2) cmd_auth prints OAuth access_token/refresh_token to stdout, which can easily leak credentials via logs/CI; (3) Playwright scraping returns raw SVG markup in one flow without sanitization, which can become dangerous in downstream rendering contexts. These are the primary concerns rather than overt malicious payloads.