pub fn validate_command(cmd: &str) -> Result<(), String>Expand description
Validate that a command name is safe to execute.
Rejects:
- Empty commands
- Shell interpreters (bash, sh, zsh, powershell, etc.)
- Paths (absolute, relative, or parent traversal)
Commands must be bare binary names resolved via PATH by the OS.