pub fn analyze(command: &str) -> ShellFileEffectsExpand description
Classify the file reads and edits of command. A command longer than the
shell gate validates is not analysed: the hooks run this before the gate,
and each nested sh -c level is another recursive pass.