piclist-upload

No clear malware is evident. The main security concern is that untrusted Markdown can reference arbitrary local files, which the script may upload and, with --in-place, delete. The configurable destination and predictable temporary-file symlink overwrite also merit caution. Use only with trusted Markdown and review references before enabling in-place processing.