Review the safety boundary

Netsuke reduces some common quoting mistakes, but it is not a sandbox:

• {{ ins }} and {{ outs }} are quoted as path arguments.
• Arbitrary Jinja values in command and script are not automatically shell-quoted.
• script uses /bin/sh -e in v0.1.0-beta1.
• shell, grep, fetch, filesystem helpers, and ordinary recipes interact with the host.
• raw template output and handwritten shell fragments remain the manifest author's responsibility.
• Literal shell dollar expressions currently require Ninja-aware escaping, such as $$PATH.

Do not run an untrusted Netsukefile. Prefer explicit inputs, avoid embedding secrets in commands or URLs, and pin dependencies used by recipes.