blume-migrate

This is intended to be a Jekyll-to-Blume migration codemod, not apparent malware. It has a significant path traversal risk: crafted include_relative paths can cause out-of-root file access and potentially out-of-root writes or deletion when run with --write. Validate resolved paths against the project root before reading, writing, or removing files. The provided fragment also appears syntactically invalid.

This is a legitimate-looking local wiki migration CLI, not evident malware. As supplied, it is syntactically invalid. If corrected, unvalidated paths from project-controlled tables and content can escape the working directory and affect files outside it when write operations run. Validate and resolve all input paths against an allowed root before filesystem access.