fix(security): replace shell=True with shlex.split() to prevent shell injection

ai_agents/agents/examples/voice-assistant-nodejs/tenapp/ten_packages/extension/main_nodejs/tools/run_script.py

@@ -8,14 +8,15 @@
 import subprocess
 import sys
 import os
+import shlex
 
 
 def run_cmd(cmd: str, env: dict[str, str] | None = None) -> int:
     """Run a shell command."""
     if env is None:
         env = os.environ.copy()
     print(f"Running: {cmd}")
-    result = subprocess.run(cmd, shell=True, check=True, env=env)
+    result = subprocess.run(shlex.split(cmd), check=True, env=env)
     return result.returncode
 
 

packages/core_apps/default_app_cpp/tools/run_script.py

@@ -9,6 +9,7 @@
 import platform
 import subprocess
 import sys
+import shlex
 
 
 BUILD_TYPE = "debug"
@@ -52,7 +53,7 @@ def detect_arch() -> str:
 def run_cmd(cmd: str) -> int:
     """Run a shell command."""
     print(f"Running: {cmd}")
-    result = subprocess.run(cmd, shell=True, check=True)
+    result = subprocess.run(shlex.split(cmd), check=True)
     return result.returncode
 
 

packages/core_extensions/default_extension_nodejs/tools/run_script.py

@@ -8,14 +8,15 @@
 import subprocess
 import sys
 import os
+import shlex
 
 
 def run_cmd(cmd: str, env: dict[str, str] | None = None) -> int:
     """Run a shell command."""
     if env is None:
         env = os.environ.copy()
     print(f"Running: {cmd}")
-    result = subprocess.run(cmd, shell=True, check=True, env=env)
+    result = subprocess.run(shlex.split(cmd), check=True, env=env)
     return result.returncode
 
 

packages/example_apps/transcriber_demo/ten_packages/extension/vtt_nodejs/tools/run_script.py

@@ -8,14 +8,15 @@
 import subprocess
 import sys
 import os
+import shlex
 
 
 def run_cmd(cmd: str, env: dict[str, str] | None = None) -> int:
     """Run a shell command."""
     if env is None:
         env = os.environ.copy()
     print(f"Running: {cmd}")
-    result = subprocess.run(cmd, shell=True, check=True, env=env)
+    result = subprocess.run(shlex.split(cmd), check=True, env=env)
     return result.returncode