ai-control-framework

The server frequently uses 'execSync' to run shell commands, often interpolating user-provided inputs (e.g., feature names, issue descriptions, project names) directly into these commands. This pattern is highly vulnerable to command injection if inputs are not meticulously sanitized. While some script generation uses heredocs which offer slight protection, direct command execution with untrusted inputs poses a significant risk. The 'emergency' prompt, explicitly designed for critical contract changes, involves direct modification of files and Git operations, which amplifies this risk if not used in a highly controlled, human-supervised environment with robust input validation.