sn-ppt-workbench

This code implements a PPT editing server and configured AI/agent integrations; it shows no clear malware or covert exfiltration. The primary concern is unauthenticated state-changing, shutdown, and file-serving routes, especially if the server is bound beyond loopback; configured credentials are sent to the configured providers or agent commands as part of intended operation. ACP permits agent workspace writes and its path check may be bypassable through symlinks, while HTML/CSS filtering is not comprehensive. Severity is moderate and deployment-dependent; the default host is 127.0.0.1, and the pinned Mermaid asset is hash-verified.

This code is a charting-library implementation for rendering charts, maps, tooltips, and interactive controls, with no evidence of malware, credential theft, or unauthorized network activity. It contains a conditional code-execution fallback for string GeoJSON using new Function, plus HTML insertion paths that can expose applications to DOM XSS if untrusted configuration or data is passed as content. Severity is conditional security concern; no suspicious domains, URLs, IPs, credentials, or environment variables are present in the excerpts.