carapace

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONPERSISTENCE
Full Analysis
  • [COMMAND_EXECUTION]: The documentation describes several mechanisms for executing external commands to provide dynamic completions. This includes the ActionExecCommand Go function, the run field in YAML specifications, and the $sh macro. These are core features used to retrieve data from tools (e.g., running git branch to complete branch names).
  • [DYNAMIC_EXECUTION]: The codegen tool, described in references/convert.md and references/mcp.md, generates Go source code from YAML specifications. This is a primary utility for converting user-defined specs into native completers.
  • [PERSISTENCE]: The references/setup.md file provides shell integration snippets that modify shell configuration files (such as ~/.bashrc, ~/.zshrc, and Microsoft.PowerShell_profile.ps1) to enable completions in the user's terminal environment.
  • [REMOTE_CODE_EXECUTION]: The references/mcp.md file describes MCP tools (complete_command, list_macros) that can execute arbitrary binaries if a specific executable path is provided. The documentation explicitly notes that this requires user confirmation as a security boundary.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 05:08 PM