page-build

No clear malware behavior is visible. The main security issue is unsanitized --page-name path construction, which can allow reads and writes outside the intended workspace. HTML injection risk in pre-rendered fragments cannot be established from this incomplete fragment.