research-docs

The code does not show clear malware or supply-chain attack behavior. The primary security concern is path traversal through unvalidated citation filenames in the answer JSON, allowing reads or parser access outside the configured data directory. HTML injection is also possible depending on how CITATIONS_JSON is used in report.html because JSON is inserted without HTML/script-context escaping. Validate resolved paths against data_dir, restrict citation filenames, and safely embed JSON in HTML. If the final `main(` text is literal, the fragment also contains a syntax error.