math-teacher

The code is an educational algebra module with no evident malware, data theft, persistence, or supply-chain sabotage. However, evaluateExpression and showSteps contain a significant arbitrary-code-execution risk because they use eval() on caller-controlled expression data. The evaluator should be replaced with a strict arithmetic parser or safe expression library, and variable names should be escaped or validated. Other issues are primarily mathematical edge-case handling.