From d9017f5d1d66134a2a08b9d3de265bfc2ae3715f Mon Sep 17 00:00:00 2001
From: Bryan <74067792+Bryan-Roe@users.noreply.github.com>
Date: Tue, 7 Jul 2026 04:38:45 -0700
Subject: [PATCH] Potential fix for code scanning alert no. 1876: Uncontrolled
 command line

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
---
 mount/chat_integration.py | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/mount/chat_integration.py b/mount/chat_integration.py
index 545efad09..1a46385cb 100644
--- a/mount/chat_integration.py
+++ b/mount/chat_integration.py
@@ -157,11 +157,15 @@ async def chat(
                 "--provider",
                 normalized_provider,
                 "--once",
-                "--",
-                message,
             ]
 
-            result = subprocess.run(cmd, capture_output=True, text=True, cwd=str(self.chat_path))
+            result = subprocess.run(
+                cmd,
+                input=message,
+                capture_output=True,
+                text=True,
+                cwd=str(self.chat_path),
+            )
 
             return {
                 "success": result.returncode == 0,