[igorbark]

probably adding a confirmation message the first time the alias is used for each command would be good, it would be nice to know when i'm invoking git and when i'm invoking a third party binary regardless of any exploit attempts!

[account42]

If malicious code ends up in your $PATH you have much bigger problems than git having a seamless plugin architecture.