preprep

No direct evidence of malware inside this Python module. The primary security exposure is supply-chain/control-plane risk: it executes a Node-based “archify” program from a path that can be overridden via environment/CLI (without integrity/pinning) and then renders the resulting (and potentially attacker-influenced) SVG/CSS using a configurable Chrome binary. It also embeds optional CSS verbatim and writes outputs to attacker-influenced paths, so poisoned inputs or tool binaries could lead to arbitrary code execution or harmful rendering. Overall risk is moderate and depends heavily on trust/pinning of archify/Chrome and on the provenance of the spec/CSS.