lov-html2pptx

This is intended as a local HTML editing and PPTX export server, not evident malware: it contains no credential collection, external network destination, or direct shell-based code execution. Its unauthenticated read/write endpoints can expose or overwrite the selected file if reachable, and its predictable adjacent temporary-file path may permit symlink-based overwrite by a local attacker able to modify that directory; binding to a non-loopback host increases exposure. The provided fragment is syntactically incomplete and will not run as shown. Severity is moderate if exposed beyond the local machine, otherwise limited to local-access risks.