html-to-pdf

The code appears to be a legitimate HTML-to-PDF CLI and contains no evident malicious payload or covert exfiltration. However, it is unsafe for untrusted input: arbitrary URLs and HTML are rendered with active browser capabilities, Chromium sandboxing is disabled, and output paths can escape the intended output directory and overwrite files. Restrict inputs, isolate the browser, disable unnecessary network/file access, validate output paths, and avoid using this tool with attacker-controlled arguments.