indykite-authzen-search-action
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were identified during the analysis. The skill implements its core functionality using standard tools and practices.
- [COMMAND_EXECUTION]: The skill uses a bash script (
scripts/search-action.sh) to perform network requests viacurl. The script implements defensive checks by pinning the targetAPI_URLto known IndyKite domains (eu.api.indykite.comorus.api.indykite.com) before attaching credentials, and it usesjqto ensure the request body is valid JSON. - [CREDENTIALS_UNSAFE]: Sensitive information, such as the
API_KEYandBEARER_TOKEN, is handled securely via environment variables. The provided script includes a--printoption that explicitly redacts these values, preventing accidental exposure in logs or terminal output.
Audit Metadata