signal-history-search

This utility exports and searches local Signal chat history and does not show explicit data exfiltration, credential theft, or destructive behavior. However, unescaped --filter and insufficiently escaped --chat values, as well as unquoted ripgrep option values, reach a dynamically executed shell command and create a command-injection risk. The temporary export contains sensitive messages and may remain on disk when --keep-temp is used. Overall severity is a security warning; review and safely quote all user-controlled command components before use.