Safety note: this tool only runs a strict allowlist of local commands against the uploaded file path and truncates output.