Since this is only a simple local command-line tool that only runs when the user explicitly tells it to, I don't expect any vulnerabilities to appear, but if there are any, please create a new issue.