Skills
skills/indykite/skills/indykite-authzen-evaluations/Gen Agent Trust Hub

indykite-authzen-evaluations

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a shell script evaluate-batch.sh that uses curl to make API requests. The script securely handles command arguments using an array to prevent shell injection and validates input data using jq before processing.
  • [SAFE]: The execution script implements a strict host-pinning check that restricts network operations to the official IndyKite domains (eu.api.indykite.com or us.api.indykite.com). This prevents the transmission of credentials to unauthorized or malicious third-party servers.
  • [SAFE]: Security credentials, such as the IndyKite API Key and Bearer Tokens, are managed correctly through environment variables rather than being hardcoded within the script or documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 05:35 PM
Security Audit — agent-trust-hub — indykite-authzen-evaluations