The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes several shell commands for environment setup and management, including installing the Knock CLI (npm install -g @knocklabs/cli), authenticating the CLI (knock login), and managing git branches for implementation (git checkout -b knock-implementation). These are standard operations for the skill's purpose.
[EXTERNAL_DOWNLOADS]: The skill fetches official vendor resources, including the @knocklabs/cli package, the knocklabs/skills library via npx, and the @knocklabs/node library for user import scripts. These resources are hosted on official registries (NPM) and belong to the verified author.
[INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it instructs the agent to analyze the user's local codebase to discover product logic, user models, and event triggers. While this is necessary for the skill's functionality, it involves processing untrusted external data.
Ingestion points: Codebase analysis in rules/discover-workflows.md and rules/import-users.md.
Boundary markers: None explicitly defined to separate codebase content from instructions.
Capability inventory: File writing, shell command execution, and tool calls to the Knock MCP server.
Sanitization: No specific sanitization or escaping of ingested codebase content is mentioned.
[DYNAMIC_EXECUTION]: The skill generates Node.js scripts in rules/import-users.md to facilitate bulk user identification. These scripts are generated based on local codebase research and are intended to be reviewed and executed by the user to sync data with the Knock platform.
[PROMPT_INJECTION]: The skill uses strict instructional constraints to control the agent's output behavior, such as mandating one-line responses and suppressing summaries or menus. Additionally, it increases agent autonomy by directing the agent to perform test sends without explicit user confirmation in the wrap-up phase. These are stylistic and functional choices for the specific persona and do not attempt to bypass core safety filters.

knock-setup