scientific-slides

No evidence of stealthy malware (no network/exfiltration, no credential theft, no obfuscated payloads) was observed in this module. The dominant security concern is operational and supply-chain-adjacent: when given a `.tex` file, it executes `pdflatex` via `subprocess.run` in the input file’s directory without sandboxing or explicit hardening, which can lead to unsafe filesystem side effects and potentially dangerous TeX behaviors depending on the environment. PDF/PPTX parsing adds secondary risk for malformed inputs. Overall: likely safe for trusted inputs, but risky for untrusted LaTeX unless sandboxed and hardened.