Letting a repository share commands without handing it a shell
Slashi, the VS Code extension I maintain, lets you chain steps into your own commands: save all...
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.