deck-design-pdf

No clear evidence of malware. The main risks are HTML/script injection from untrusted presentation options and path traversal through the palette name. These may be acceptable when all inputs are trusted, but should be addressed if callers can supply untrusted values.