CodeQL library for Java/Kotlin
codeql/java-all 0.8.3 (changelog, source)

Predicate argumentToExec

Holds if e is an expression used as an argument to a call that executes an external command. For calls to varargs method calls, this only includes the first argument, which will be the command to be executed.

Import path

import java
predicate argumentToExec(Expr e, CommandInjectionSink s)