appName is derived from the app bundle's Info.plist via plistBuddy, making it an environment-controlled value. If appName contains shell metacharacters such as spaces, quotes, semicolons, or backticks ...