Command Classification

Command classification refers to the process of categorizing and labeling different types of instructions or directives within AI systems to understand their function, risk level, and compliance requirements. This matters for governance because organizations need to distinguish between routine operational commands and those with higher stakes impacts on data, security, or regulatory obligations. Proper classification enables better audit trails, access controls, and ensures the right oversight mechanisms are applied to different command types.

1 item

EnforcementGlobal2026-09-04

SSH MCP Command Classification Flaw Breaks Human Approval Gate Assumptions

A critical advisory has identified a flaw in an SSH MCP server implementation where a command could be classified as safe while the remote shell executed a different, more privileged command. The vulnerability breaks read-only workflow assumptions that enterprise approval gates depend on. Compliance teams are advised to treat command classification, server provenance, and approval workflows as controls requiring independent validation.

MCP agentic AI prompt injection agent security command classification human-in-the-loop tool poisoning authorization