A shell command is executed through system() or a shell with interpolated data.
Do not pass user data to a shell; use Process with an explicit argument array.