Security: files are scanned and type-checked in your browser; code is never executed — only read & analyzed. Dangerous types (.exe/.js/…) are blocked. Raw extraction is kept separate from AI analysis. Nothing leaves your machine unless you connect the backend. AI: simulated