export-pdf

This script converts Markdown files into PDFs and reports output size and page count. It contains a Python code-injection risk because the derived PDF path is inserted unescaped into a Python string passed to `python -c`; a crafted input filename or output path can execute Python as the user running the script. No explicit malware behavior, credential targeting, or network exfiltration is evident; severity is a security warning dependent on attacker control of the processed path.