Please do not open public issues for vulnerabilities.
Report security concerns privately through GitHub Security Advisories after the repository is published.
devx launches only supported, fixed agent commands. It does not accept arbitrary agent command strings from configuration.