editable-export

As supplied, the fragment is not executable because `EXPORT_JS =` is incomplete. If corrected, it uploads project.json and listed media to https://edit[.]trysometh[.]ing/studio (or the configurable --site); unvalidated media paths could cause files outside the package to be uploaded, and EDITATLAS_INTERNAL is exposed to the studio origin. The title-derived output path is also not sanitized. These are significant data exposure and path-handling risks; no explicit destructive behavior or standalone malware is evident.