siteos-search

No evident malware or data exfiltration behavior. There is a local filesystem path traversal risk: artifact path components are insufficiently validated, and cleanup trusts filenames from the session file. Restrict suffixes/extensions to safe filename characters and verify resolved paths remain within the intended directory before writing or deleting.