fix: sanitize subprocess call in rename.py

[orbisai0security]

Summary

Fix critical severity security issue in bin/rename.py.

Vulnerability

Field	Value
ID	V-001
Severity	CRITICAL
Scanner	multi_agent_ai
Rule	V-001
File	bin/rename.py:89
CWE	CWE-78

Description: The bin/rename.py script constructs a shell command using user-supplied input (filenames or CLI arguments parsed at line 258) and passes the resulting 'command' variable to subprocess.run at line 89. If the command variable is assembled as a string rather than a list, or if shell=True is set, shell metacharacters embedded in user-supplied filenames or arguments will be interpreted by the OS shell, enabling arbitrary command execution. This is a classic OS command injection pattern (CWE-78).

Changes

• bin/rename.py

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security

[cshilwant]

please plan to address - https://github.com/TexasInstruments/processor-sdk-doc/actions/runs/25904782328/job/76183895662?pr=709

Error: # Commit-Check ❌
Commit rejected by Commit-Check.                                  
                                                                  
  (c).-.(c)    (c).-.(c)    (c).-.(c)    (c).-.(c)    (c).-.(c)  
   / ._. \      / ._. \      / ._. \      / ._. \      / ._. \   
 __\( C )/__  __\( H )/__  __\( E )/__  __\( C )/__  __\( K )/__ 
(_.-/'-'\-._)(_.-/'-'\-._)(_.-/'-'\-._)(_.-/'-'\-._)(_.-/'-'\-._)
   || E ||      || R ||      || R ||      || O ||      || R ||   
 _.' '-' '._  _.' '-' '._  _.' '-' '._  _.' '-' '._  _.' '-' '._ 
(.-./`-´\.-.)(.-./`-´\.-.)(.-./`-´\.-.)(.-./`-´\.-.)(.-./`-´\.-.)
 `-´     `-´  `-´     `-´  `-´     `-´  `-´     `-´  `-´     `-´ 
                                                                  
Commit rejected.                                                  
                                                                  
Type author_name check failed ==> orbisai0security 
The committer name seems invalid
Suggest: git config user.name 'Your Name'

[orbisai0security]

please plan to address - https://github.com/TexasInstruments/processor-sdk-doc/actions/runs/25904782328/job/76183895662?pr=709

Error: # Commit-Check ❌
Commit rejected by Commit-Check.                                  
                                                                  
  (c).-.(c)    (c).-.(c)    (c).-.(c)    (c).-.(c)    (c).-.(c)  
   / ._. \      / ._. \      / ._. \      / ._. \      / ._. \   
 __\( C )/__  __\( H )/__  __\( E )/__  __\( C )/__  __\( K )/__ 
(_.-/'-'\-._)(_.-/'-'\-._)(_.-/'-'\-._)(_.-/'-'\-._)(_.-/'-'\-._)
   || E ||      || R ||      || R ||      || O ||      || R ||   
 _.' '-' '._  _.' '-' '._  _.' '-' '._  _.' '-' '._  _.' '-' '._ 
(.-./`-´\.-.)(.-./`-´\.-.)(.-./`-´\.-.)(.-./`-´\.-.)(.-./`-´\.-.)
 `-´     `-´  `-´     `-´  `-´     `-´  `-´     `-´  `-´     `-´ 
                                                                  
Commit rejected.                                                  
                                                                  
Type author_name check failed ==> orbisai0security 
The committer name seems invalid
Suggest: git config user.name 'Your Name'

addressed this. pls review.