knap
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill suggests the installation of the
knappackage vianpm install -g knap. This is the primary tool used by the skill for rendering templates. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources and local files, which presents a surface for indirect prompt injection.
- Ingestion points: Data is ingested via
defuddle parsefrom URLs, through the--dataflag for local files, and via standard input (SKILL.md). - Boundary markers: The tool uses standard template delimiters (
{{,{%), though the instructions do not specify additional agent-level boundary markers for untrusted content. - Capability inventory: The skill is capable of writing files to the local file system using the
-o(output) and--output-dirflags (SKILL.md). - Sanitization: The tool includes built-in filters like
safe_namefor generating safe filenames from data andyaml_propertyfor correctly formatting frontmatter properties (SKILL.md).
Audit Metadata