smart-charts

No direct malware, credential theft, or unauthorized network behavior is present in the fragment. The main concern is security: untrusted Python is executed in-process, and the blacklist/AST checks are not a robust sandbox. Treat this as a significant risk if callers can submit untrusted transformation code; use process or container isolation with strict resource limits.