Struct ShellExec 

pub struct ShellExec;

Capability that executes commands with full telemetry and audit.

Security

Commands are executed via Command::new(program) with explicit argument separation — no shell interpretation. Shell metacharacters (;, |, &, >, <, $(), backticks) are treated as literal characters, preventing shell injection attacks (FINDING #5).

Every command is logged to the WAL for audit purposes.

Trait Implementations

impl Capability for ShellExec

fn schema(&self) -> Value

Returns the JSON Schema for ShellExec arguments.

Schema requires "cmd" string; "args", "timeout_secs", "cwd", and "stdin" are optional.

fn name(&self) -> &'static str

Returns the capability name (e.g., "FileRead", "FileWrite").

fn description(&self) -> &'static str

Returns a one-line human-readable description of what this capability does.

fn validate(&self, args: &Value) -> Result<()>

Validates the arguments against the schema.

fn execute(&self, args: &Value, ctx: &Context) -> Result<Output>

Executes the capability with the given arguments and context.