goose executes arbitrary shell commands embedded in recipe stdio extensions and retry.checks without security inspection. Malicious recipes delivered over the network can bypass the recipe security scan (extensions/retry config not inspected) and run commands as the local user executing goose. Affected: `aaif-goose/goose