screenshot, pdf, and responsive accepted arbitrary output paths,
allowing writes to any location on disk. eval read arbitrary files
without restriction. Add path validation:
- Output paths (screenshot/pdf/responsive): restricted to /tmp or cwd
- Input paths (eval): restricted to cwd only
- Rejects traversal via .. after path resolution
Closes#13
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
oliursahin