paper-artifact-runtime

No clear signs of intentionally malicious Python behavior (no network exfiltration, no hardcoded secrets, no backdoor logic). The main security risk is subprocess-based LaTeX compilation using user-influenced TeX without comprehensive TeX command sanitization beyond a narrow visibility-control check; this could enable unintended filesystem access or artifact/log manipulation in environments where the manuscript input is not fully trusted. Filesystem workspace/symlink protections are present and reduce some path-based attacks.