The closest thing here that I can image is using maliciously crafter file name that contains query in name and will be used bu osquery to craft new query, but I can't find such thing in our code