## Lesson — 2026-03-06T10:00:40.352Z

**Tags:** security, curated
**Pattern:** \b(echo|run_shell_command|exec|sh|bash)\b.*\$TOOL_INPUT
**Engine:** regex
**Scope:** *.sh, *.bash, *.yml, *.yaml
**Severity:** error

Sanitize AI-provided environment variables in shell commands to prevent command injection.
