https://semgrep.dev/playground/r/python.flask.security.injection.os-system-injection.os-system-injection?editorMode=advanced We don't have a transformer for this rule at this time. We should decide if the fix is secure enough of a suggestion.