It's no secret that we reuse system.run[] agent key for running remote commands on agents:

	param = zbx_dyn_escape_string(command, "\"");
	item.key = zbx_dsprintf(item.key, "system.run[\"%s\",\"%s\"]", param, NULL == result ? "nowait" : "wait");

Would be better to use in this piece of code quote_key_param() instead of zbx_dyn_escape_string() and mandatory double quotes.