knap
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
knapCLI tool from the public NPM registry usingnpm install -g knapor executing it vianpx knap.\n- [COMMAND_EXECUTION]: The instructions depend on shell commands for rendering Markdown templates, validating syntax, and piping data between different command-line utilities likedefuddle.\n- [DYNAMIC_EXECUTION]: The skill uses a templating engine (knap) to dynamically generate Markdown content by evaluating logic, filters, and variables within template files.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, such as files or web content parsed bydefuddle, and interpolates it into templates, which could be exploited to influence agent behavior.\n - Ingestion points: External data loaded from
.jsonor.csvfiles, or piped from web extraction tools likedefuddle(as seen inSKILL.md).\n - Boundary markers: No specific boundary markers or delimiting instructions are provided to the agent to distinguish between raw data and template logic.\n
- Capability inventory: The skill allows writing files to the disk using the
-oand--output-dirflags and involves executing external CLI tools.\n - Sanitization: The documentation recommends the
safe_namefilter for file naming, but no content sanitization or validation for the data being rendered into the template body is specified.
Audit Metadata