moai-domain-svg-infographic

No clear indicators of intentional malware (e.g., obfuscated payloads, credential theft, persistence, or explicit network exfiltration) are present in this module. However, the tool is inherently high-risk because it embeds attacker-controlled SVG markup directly into an HTML wrapper with no sanitization or restrictive browser policy, then executes a real headless Chromium-family browser to render it. The risk increases substantially if the caller uses --no-sandbox, and the executable used for rendering can be influenced via --browser or environment variables (execution-control risk).