- Replace eval with getent passwd to prevent command injection
- Use dpkg -s for precise FUSE package detection
- Add set -o pipefail
- Fix LD_LIBRARY_PATH trailing colon
- Use cp -a instead of mv glob for AppImage extraction
- Add error checks in fallback path
- Use chmod u+rwX,go+rX instead of 774
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>