Worked on a security-focused refactor of the RunCommand API in the cloudwego/eino-ext repository, redesigning command execution to accept arguments as a slice of strings rather than a single command string. This approach, implemented in Go, eliminated shell injection risks and improved input validation for backend systems. Introduced a CommandOutput struct to provide structured access to stdout, stderr, and exit codes, enhancing observability and debugging capabilities. The update required end-to-end changes across multiple components, aligning command execution with best practices in system programming and command line interface development. The work prioritized safer automation workflows and clearer success criteria for users.