Wait, no It uses eval. It is easy to exploit. DO NOT run untrusted bash_enter scripts. count@bumba:~$ alen '};rm omgsploitz;#' 1 rm: cannot remove `omgsploitz': No such file or directory