diffusion-map

No evidence of malware or data exfiltration appears in this fragment. The main security concern is that several exported functions use caller-controlled slugs in filesystem paths without validation, creating a path traversal risk that can include recursive deletion through deleteMap(). Validate slugs centrally and constrain resolved paths to the maps directory.