[_ck_]

Not necessarily. The don’t escape backtick which in PHP can sometimes indicate a shell. There may be some kind of condition where it’s being parsed incorrectly. I suggested they take backticks out of the api but I guess they don’t agree.