claudestudio

No clear malware or intentional data exfiltration is visible. There is a concrete path-traversal flaw in the local file server: the string-prefix containment check can permit serving files from sibling paths outside the selected root. Since loaded page scripts execute in Chromium and are not network-restricted, auditing untrusted content also carries browser/network exposure. Use only trusted targets until the path check and browser isolation are improved.