knap
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources, such as web pages parsed by
defuddleor local files, and interpolates this data into Markdown templates. - Ingestion points: Data is ingested via the
--data,--data-json, and stdin flags inSKILL.mdduring therenderandbatchcommands. - Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore instructions embedded within the processed data.
- Capability inventory: The skill has the capability to write to the file system using the
-o(output) and--output-dirflags. - Sanitization: The skill documentation recommends using the
safe_namefilter for data-derived filenames, but general content sanitization for template interpolation is not detailed. - [COMMAND_EXECUTION]: The skill relies on the execution of the
knapanddefuddleCLI tools to perform its primary functions, including template rendering, validation, and batch processing. - [EXTERNAL_DOWNLOADS]: The instructions recommend installing the
knappackage globally vianpm install -g knapor running it vianpx knapto provide the necessary environment for the skill.
Audit Metadata