Scans tcl for command injection