OS Command Injection

@ronomon/opened is vulnerable to OS command injection. A remote attacker can execute commands on the system because an untrusted input is not filtered and used as part of a string executed as a command by child_process.exec().