diff --git a/single-scripts/commit.ts b/single-scripts/commit.ts
index 2a495c2..e06e779 100755
--- a/single-scripts/commit.ts
+++ b/single-scripts/commit.ts
@@ -72,7 +72,7 @@ async function execCommandShell(
     args: string[],
 ): Promise<void> {
     const ps = spawn(command, args, {
-        // shell: true,
+        // shell: true, // when turn `shell` true will cause shell command line injection
         stdio: ["inherit", "inherit", "inherit"],
     });
     return new Promise((resolve, reject) => {
@@ -321,5 +321,5 @@ main().catch((err) => {
     process.exit(0);
 }).then(() => process.exit(0));
 
-// @SCRIPT-SIGNATURE-V1: yk-r1.ES256.20260125T131632+08:00.MEUCIQDEukVWncbkfee1cb9A
-// nU0VP5F161xUX/x/fe8IZgb8nwIgHDtOaAzZ2UcjbJ13tD5BgsE+dfk5ifXaKjuYxdQxZGY=
+// @SCRIPT-SIGNATURE-V1: yk-r1.ES256.20260125T131735+08:00.MEUCIHxEft36c8GHONGw4yAL
+// dZV+AcXDaG8lwOL1rCeDJv5FAiEAhCnraPe+ajy38ifHzXm3rB321EVeNVTOBEQNNxXQSms=