seaslides-typst-slides-skill

No clear malware/backdoor behavior is present, but there are high-impact security risks driven by untrusted remote content: (1) potential ZIP Slip/path traversal in _extract_zip_bytes due to unsanitized ZIP member filenames used in os.path.join without path normalization checks, and (2) potential SSRF/unrestricted outbound fetching by downloading arbitrary remote image URLs found in MinerU-produced Markdown via urllib.request.urlretrieve. These issues warrant review/hardening before use in hostile environments.

This fragment is best characterized as legitimate image download/save/polling utility code with no clear indicators of intentional malware, obfuscation, or backdoor-like behavior. The primary security concerns are misuse-dependent: unrestricted outbound HTTP fetching of caller-provided URLs (SSRF risk) and writing attacker-influenced network bytes to caller-supplied filesystem paths without path sandboxing (potential arbitrary/unsafe file write depending on caller). It also parses untrusted image bytes with Pillow (parser attack surface) without explicit resource limits. Review and harden the caller’s URL/path sourcing (allowlists, scheme restrictions, and output directory enforcement) and keep Pillow updated.