Command injection vulnerability: Using template literals with user-controllable path in shell command. Use array form or properly validate/sanitize the path before execution.

[joe10832]

Command injection vulnerability: Using template literals with user-controllable path in shell command. Use array form or properly validate/sanitize the path before execution.

  execSync('chmod', ['+x', scriptPath], {
    stdio: "inherit",
    cwd: process.cwd(),
  })
  execSync(scriptPath, {
    stdio: "inherit",
    cwd: process.cwd(),
  })

Originally posted by @Copilot in #24 (comment)