`shell=True` in AI Python: Command Injection

BrassCoders found command injection in two of the fifteen AI-generated Python files in its published benchmark corpus: run_command.py used subprocess.run with shell=True on a caller-supplied string, a