Defending Against Command Injection Patterns

Sanitize user-provided arguments in child_process executions to prevent arbitrary shell access.