grace-execute
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to invoke a command-line utility called
graceto execute change plans. It specifically enables the execution of commands defined as 'MustPassCommand' within these plans. This execution is the core purpose of the skill and is governed by strict operational rules. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external files (
spec.xmlandplan.xml). This ingestion creates a surface where external content could influence the agent's actions. However, the skill provides instructions to only use plans that have undergone an external approval and identity-matching process. 1. Ingestion points: Configuration and plan details are read fromspec.xmlandplan.xmlfiles as described in the preflight section. 2. Boundary markers: The skill relies on an external 'approved' status and 'identity-matched' checks to ensure the integrity of the input files. 3. Capability inventory: The agent performs shell command execution using thegracetool during baseline, target, and final validation phases. 4. Sanitization: The skill does not explicitly define internal sanitization for the commands found in the plans, relying instead on the tool's structured plan execution logic.
Audit Metadata