osquery-query-helper

This script extracts table definitions, but directly embeds the user-supplied table name in awk program text, allowing awk injection and potentially command execution through crafted input; severity is a security warning. No malware behavior is evident in the supplied fragment, and the behavior of detect-format.sh is outside the analyzed code.