[sec-core] docs: Sec-Core中command解析

[yqhao-2002]

Component

sec-core

Your Question

想问下在Sec-core的上层传递过来的命令，是单条命令么，看了下逻辑，command.split()会把类似于 && | 等字符的命令错误的解析，感觉会造成一些隐患。
另外借鉴claude code 的设计思路，这部分用tree-sitter做一次ast分析会不会更好？

Context

想问下在Sec-core的上层传递过来的命令，是单条命令么，看了下逻辑，command.split()会把类似于 && | 等字符的命令错误的解析，感觉会造成一些隐患。
另外借鉴claude code 的设计思路，这部分用tree-sitter做一次ast分析会不会更好？

[github-actions]

🔀 Issue Triage

This issue has been automatically assigned to @yanrong-hsr as the maintainer(s) of sec-core.

Maintainers, please review and triage this issue. Set a priority label and update the status as needed. Thanks! 🙏