switch-chat

The fragment appears to be a legitimate local task-handoff editor rather than malware. It performs no external exfiltration or command execution. Security issues exist: attacker-controlled content can cause HTML/script injection in generated documents, and the temporary localhost save service allows unauthenticated cross-origin overwrites of the selected output file. Risk is moderate when untrusted Markdown or hostile local web content is in scope, and lower for trusted local use.