A proof of concept showing why piping to sh is a bad idea.