🔒 Fix command injection in install command

Co-authored-by: sunnylqm <615282+sunnylqm@users.noreply.github.com>

Author: google-labs-jules[bot]

src/install.ts

@@ -15,7 +15,6 @@ export const installCommands = {
     spawnSync(installCommand.command, installCommand.args, {
       cwd: cliDir,
       stdio: 'inherit',
-      shell: true,
     });
   },
 };