yao-geo-tracking

No clear malware behavior is present. The primary security issue is an unsanitized, input-controlled slug used to construct HTML and DOCX output paths, enabling path traversal and unintended file overwrites. Restrict the slug to a safe filename component and verify resolved output paths remain inside output_dir.