research-literature-review

This module is a build/compilation wrapper around xelatex+bibtex with template/BST path management and cleanup. It does not show explicit malware behavior (no network access, no secrets, no persistence, no obfuscated payloads). However, it meaningfully increases security risk because it (a) executes external TeX binaries on a provided .tex file (TeX processing can be dangerous without sandboxing/hardening) and (b) invokes those binaries using subprocess with shell=True when passing env, which is a higher-risk execution pattern than shell=False. Additionally, it modifies the input .tex in-place and logs TEXINPUTS/BSTINPUTS values, which can leak local path information. Treat this as operationally sensitive code: use only with trusted TeX inputs and run in an isolated/sandboxed environment.