code-splitter

This is a component-generation utility, not evidently malware. It has filesystem path traversal and generated-source injection risks when analysis or component input is untrusted, and the CLI currently fails because `epilog` is undefined. No network exfiltration or other overt malicious behavior is present.