indykite-authzen-evaluation
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/evaluate.shexecutes shell commands includingcurlandjqto process data and interact with the REST API. - [DATA_EXFILTRATION]: The skill performs network operations to
eu.api.indykite.comandus.api.indykite.comto fetch authorization decisions. Thescripts/evaluate.shscript implements a security check that restricts network requests to these specific IndyKite domains, ensuring that credentials are not sent to untrusted hosts. - [CREDENTIALS_UNSAFE]: The skill documentation and scripts facilitate authentication using
API_KEYandBEARER_TOKENenvironment variables. This approach follows established security best practices for handling secrets by avoiding hardcoded credentials.
Audit Metadata