carapace
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The documentation describes several mechanisms for executing external commands to provide dynamic completions. This includes the
ActionExecCommandGo function, therunfield in YAML specifications, and the$shmacro. These are core features used to retrieve data from tools (e.g., runninggit branchto complete branch names). - [DYNAMIC_EXECUTION]: The
codegentool, described inreferences/convert.mdandreferences/mcp.md, generates Go source code from YAML specifications. This is a primary utility for converting user-defined specs into native completers. - [PERSISTENCE]: The
references/setup.mdfile provides shell integration snippets that modify shell configuration files (such as~/.bashrc,~/.zshrc, andMicrosoft.PowerShell_profile.ps1) to enable completions in the user's terminal environment. - [REMOTE_CODE_EXECUTION]: The
references/mcp.mdfile describes MCP tools (complete_command,list_macros) that can execute arbitrary binaries if a specificexecutablepath is provided. The documentation explicitly notes that this requires user confirmation as a security boundary.
Audit Metadata