Security audit

[vncsmyrnk]

Check for possible security flaws.

[vncsmyrnk]

Vulnerability	Risk	Mitigation
Command Injection	High	Requires ZSH shell-escaping for all metadata.
Unbounded File Read	High	Requires a file size limit in the parser.
Property Overwrites	Med	Must free() existing values before re-assignment.
Unsafe realloc	Med	Pointer overwritten on failure; requires temp check.
Static Buffers	Low	char[256] in parser silently truncates long input.
Parser Error Leaks	Med	Incomplete resource cleanup on validation failures.
Vendor Leaks	Low	ckdl library leaks are masked by suppressions.