Spawning a shell (sh -c / bash -c) with a constructed command enables command injection.
Invoke the target binary directly with argument vectors instead of a shell.