The Agent Skills Directory

[SAFE]: The skill provides instructions and a helper script for making authorization requests to the IndyKite AuthZEN API. The helper script (scripts/evaluate.sh) implements a domain whitelist check that restricts network operations to official IndyKite domains (such as eu.api.indykite.com and us.api.indykite.com). This mechanism prevents the exfiltration of credentials (API_KEY, BEARER_TOKEN) to unauthorized or malicious destinations.
[COMMAND_EXECUTION]: The helper script (scripts/evaluate.sh) uses standard system utilities including curl and jq. The script follows security best practices by using array-based argument passing for curl to prevent command injection and validates the request body using jq to ensure only well-formed JSON is transmitted to the API.

indykite-authzen-evaluation