kcp-render

What problem does it solve?

This Skill addresses the security risk of directly exposing AI agents to potentially untrusted or malicious knowledge.yaml files by providing a safe, pre-rendering step using the KCP standard's render pipeline.

Core Features & Use Cases

• Secure Ingestion: Renders external knowledge.yaml files to neutralize prompt injection and verify author signatures before content is exposed to the agent.
• Dependency Verification: Processes manifests from external or federated sources, ensuring trust tiers (trusted, known, unsigned, failed) are respected.
• Use Case: Safely integrate knowledge from a third-party GitHub repository by first running kcp render on their knowledge.yaml to validate its signature and trust level before allowing the agent to access its units.

Quick Start

Use kcp render path/to/external-knowledge.yaml --keys ~/.kcp/trusted-keys.yaml --out - to process an external manifest before passing the rendered output to the agent.