Malicious code can be hidden several folders deep.
Opening an unidentified compressed archive carries significant digital risks. Because RAR files can contain executables (.exe) or scripts (.vbs, .js) masked within the folder structure, they are a primary vector for trojans and ransomware. 23708.rar
Are you writing about conventions?