meanwhile the code in question imports os/exec and runs exec.Command() on arbitrary input.

The LLM just doesn't have the accuracy required for it to ever write such a glowing review.

Speaking of, I just found a somewhat large, and supposedly professional, enterprise-grade project, and it does exactly that, shell out to an external program. I was highly disappointed.

Thankfully not in my case. I would have definitely caught that.