Document possible attack vector on `get`
Document possible attack vector on `get`

This method is not supposed to receive user input, but if it does it will be vulnerable for a command injection attack.

Closes #514
erikhuda/thor