blaw-edgar-search

The code appears to be a filing-resolution and exhibit-extraction utility, not malware. It has a concrete command-injection risk through the unquoted --wrds-scratch value in an ssh shell command, plus insufficient validation of database-derived paths. The incomplete SQL definitions limit assessment of the database query. Validate and safely quote remote paths, avoid shell command strings, and constrain all archive/output paths to expected roots.