Kousuke Ebihara:
[sending email to a "|non-Postfix command" alias]
> Postfix might execute commands in a content of e-mail.
Postfix does not execute commands in the content of email messages.
Postfix creates the pipe, not the shell. For safety, Postfix has
a command_expansion_filter feature that cleans email addresses etc.
in environment variables.
Of course, you have to be careful with sending email messages into
non-Postfix commands, especially when those programs were not
written by someone with expertise in the handling of unsafe content.
Wietse