From 276dffdc1dbbc0dd081bd1d46506b1119a43e3f5 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Sat, 28 Feb 2026 01:05:01 -0700
Subject: [PATCH] fix(bench): remove unnecessary shell: true from execFileSync

execFileSync already receives args as an array, so shell: true is
redundant and a minor security anti-pattern. Addresses Greptile review.

Impact: 1 functions changed, 0 affected
---
 scripts/lib/bench-config.js | 1 -
 1 file changed, 1 deletion(-)

diff --git a/scripts/lib/bench-config.js b/scripts/lib/bench-config.js
index 804a6b3f..241a6254 100644
--- a/scripts/lib/bench-config.js
+++ b/scripts/lib/bench-config.js
@@ -70,7 +70,6 @@ export async function resolveBenchmarkSource() {
 				cwd: tmpDir,
 				stdio: 'pipe',
 				timeout: 120_000,
-				shell: true,
 			});
 			break;
 		} catch (err) {