Trace command injection through format strings

Any place a shell command is assembled from input with interpolation is injectable regardless of language.