pr-visualization

This utility extracts HTML panels and writes them as separate files. Its main security risk is path traversal: an untrusted panel ID containing slashes and `..` can cause writes outside the requested output directory; unescaped report content may also pose an HTML injection risk if generated fragments are later rendered. No malware behavior is evident; severity is moderate when report content is untrusted.