indykite-authzen-evaluation
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate authorization checks against official IndyKite API endpoints (
eu.api.indykite.comorus.api.indykite.com). - [DATA_EXFILTRATION]: The helper script
scripts/evaluate.shincludes a security safeguard that restricts the destination for sensitive API keys (X-IK-ClientKey) and bearer tokens to trusted IndyKite domains, effectively preventing credentials from being sent to unauthorized third-party URLs via configuration overrides. - [COMMAND_EXECUTION]: The skill uses common system utilities (
curl,jq) for its operations. It incorporates input validation viajqto ensure that data processed by the shell and sent to the API is well-formed JSON, reducing the risk of injection attacks through malformed input files.
Audit Metadata