indykite-authzen-search-resource
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a bash script
scripts/search-resource.shthat explicitly validates theAPI_URLagainst a whitelist of trusted vendor domains (https://eu.api.indykite.comandhttps://us.api.indykite.com). This mechanism ensures that sensitive credentials likeAPI_KEYandBEARER_TOKENare only sent to authorized endpoints, preventing data exfiltration to malicious hosts. - [SAFE]: Credentials are managed through environment variables rather than being hardcoded in scripts or configuration files, adhering to security best practices for secret handling.
- [SAFE]: The helper script includes a
--printmode designed for debugging which automatically redacts sensitive tokens (X-IK-ClientKey and Authorization headers) from the printed output to prevent accidental exposure. - [SAFE]: The skill relies on standard, well-known system utilities (
curl,jq,bash) and does not perform any unverifiable package installations or remote code execution from unknown sources.
Audit Metadata