opendesign-tokens

No clear malicious behavior is present. The custom archive extraction has a significant path traversal weakness: crafted package archive paths can write outside the cache extraction directory. Unvalidated version and cache path inputs and unrestricted metadata-selected tarball URLs add risk. Validate archive paths after resolution, constrain versions/cache paths, and validate tarball origins before fetching.