knock-email-template-migration
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted template files provided by the user, creating a surface for indirect instructions.\n * Ingestion points: Source template files are read from the
knock-migration/source/directory during the analysis phase described inrules/analyzing-source-templates.md.\n * Boundary markers: The instructions do not define specific delimiters or warnings to ignore instructions within user-provided template files.\n * Capability inventory: The skill performs file system writes to theknock/andknock-migration/directories, executesknockCLI commands for pushing resources, and makes network requests viacurltoknock.app.\n * Sanitization: No explicit sanitization or filtering of template logic (Handlebars, Mako, etc.) is documented before processing.\n- [COMMAND_EXECUTION]: The skill utilizes external CLI tools and network utilities to manage and verify resources.\n * Evidence: Instructions inrules/building-templates.mdandrules/migration-process.mdinvolve executing commands such asknock workflow push,knock layout validate, andcurlfor previewing templates. It also suggests usingpython3 -m http.serverfor local verification.\n- [DYNAMIC_EXECUTION]: The skill generates and executes JavaScript snippets to facilitate template verification via the Knock MCP server.\n * Evidence:references/verification-recipes.mdprovides a JavaScript function used by theexecute_mapi_writetool to render templates, calculate hashes, and verify style fingerprints. This execution occurs within the server's context to perform complex assertions during the verification phase.
Audit Metadata