Command Injection in AI-Generated Express.js: A Real Scan

AI coding assistants generate Express.js routes that work. They also generate routes where user input reaches execSync() without sanitization. Those two facts coexist in the same file. Here's the scan