Evasion: Shell Injection via eval/system/backtick in Input - ATR-2026-01018 (a3d44efc-862d-51f2-8a40-b033ca53dc38)
Detects inputs containing shell command injection syntax designed to exploit template engines, output processors, or server-side components that evaluate model output: Bash $(...) command substitution, Perl/Ruby @{[system "..."]} backtick expression, Ruby/Perl eval(), C System() call, Unix backtick command execution, or PowerShell $(cmd) execution. These payloads appear in untrusted user input that may be passed through code execution pipelines (LangChain eval chains, code interpreter tools, template rendering). The BLNS (Big List of Naughty Strings) category of probes generates these as direct input to test for server-side injection in AI agent pipelines.