render-chatgpt-chat

This module is best characterized as a local HTML-to-image/video generator with two major security concerns when the config/inputs are attacker-controlled: (1) high-impact command injection potential through execSync where ec.dwell_sec is interpolated into an ffmpeg shell command without numeric validation/quoting; and (2) unsanitized SVG/markup injection into generated HTML (logoSvg/wordmark) that is then rendered by Playwright. While there is no explicit malware routine in the snippet, the combination of shell execution and rendered active content makes it unsuitable to run with untrusted configuration.