r1616: Security fix: Set Run Action to a shell command would make the executable