Prefer Runtime.exec with an argument array
`Runtime.getRuntime().exec(...)` should not be invoked with a single `String` command argument; the array form (`exec(String[])`) avoids shell-style tokenization.
#Metadata
#Why it matters
The `exec(String)` overload splits on whitespace and respects no quoting; values containing spaces or shell metacharacters can change the command parsed at runtime.
#Remediation
Pass an explicit `String[]` of command and arguments, or use `ProcessBuilder` with separate arguments and the parent process inheriting no shell.
#Repository path
The generated metadata points to critiq-rules/libs/rules/catalog/rules/java/java.security.shell-runtime-exec.rule.yaml.