Plugin eval output strips control characters, so a crafted case name cannot mess with your terminal.
What's wrong with this entry?
Case names and per-case error lines printed by the plugin eval CLI now have control and format characters, plus line and paragraph separators, replaced with a space, so a crafted case name cannot inject escape sequences into your terminal. The "case files failed to load" tally is also suppressed when a JSON report was written.
return e.replace(/[\p{Cc}\p{Cf}\u2028\u2029]+/gu, " ");
Strings lifted out of the shipped bundle, so the claim above can be checked against them.