Arguments and terminal output

Prefer fixed default attributes. Expose a visitor-supplied attribute only when its name, type, allowed values, length, and owning shortcode behavior have been reviewed.

Do not permit a user to replace the shortcode tag, add nested shortcodes, inject raw markup, or supply unbounded content. Reject unknown arguments rather than forwarding them.

Choose the output mode that preserves useful text without scripts, event handlers, forms, secrets, or unsafe HTML. Define a clear empty state and a bounded maximum result size.

After changing the owning shortcode, retest every mapping. A stable terminal command does not guarantee that a third-party shortcode’s output contract stayed compatible.