Constant SHELL_SPAWNING_COMMANDS 

pub const SHELL_SPAWNING_COMMANDS: &[&str];

Commands that can execute arbitrary code passed as a string argument.

If a code_writer allowlist permits any of these, the allowlist is effectively unrestricted: the tree-sitter parser sees bash -c '...', eval "...", find -exec ... or xargs sh as a single allowed command and can’t inspect the code hidden inside. This list backs an advisory warning, not enforcement — enforcement stays fail-closed regardless.