carapace-dev
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation for the carapace library. All identified patterns relate to standard shell completion logic, Go library APIs, and testing infrastructure.
- [COMMAND_EXECUTION]: The documentation describes how the library uses
exec.Commandandsub_proc_get_output(in xonsh) to invoke completion subcommands. These are architectural descriptions of the library's internal re-invocation mechanism for resolving subcommand completions, not instructions for the agent to execute arbitrary shell commands. - [DATA_EXPOSURE]: The skill documents the library's use of standard configuration and cache directories (e.g.,
$XDG_CONFIG_HOME/carapace,$XDG_CACHE_HOME/carapace). It notes that cache files are written with0600permissions (owner-read/write only) as a security best practice for sensitive completion data. - [PERSISTENCE]: The skill mentions shell configuration files like
.bashrcor.zshrcin the context of how shell bridges create isolated, temporary configuration files to perform completion resolution without affecting the user's primary shell environment. - [PROMPT_INJECTION]: No attempts to override agent behavior or bypass safety filters were detected. The skill uses standard instructional language to guide developers through the library's reference documentation.
Audit Metadata