chart-image

No direct malware behavior is shown. The documented shell-command construction is unsafe for untrusted inputs and could permit command injection if followed literally by a shell-executing consumer. Treat inputs as untrusted and use argument-safe process execution and secure temporary files.