MetaCredo. Check. Warning. UnsafeExec
(MetaCredo v0.1.0)
View Source
Detects System.cmd, os:cmd, :os.cmd, or similar execution calls
with user-controlled arguments. Passing user input to system commands
can lead to command injection vulnerabilities.
Use allow-lists, sanitize inputs, or avoid shelling out entirely.
Category: Warning / Priority: high