indykite-capture-delete-node-properties
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates secure implementation patterns for API interaction. The helper script
scripts/capture.shincludes a strict host validation check that prevents theAPI_KEYfrom being sent to any domain other than the official IndyKite regional API endpoints (eu.api.indykite.comorus.api.indykite.com). Furthermore, the script usesjqto validate the JSON structure of the payload before execution and features a--printargument that redacts the authentication token, ensuring that sensitive credentials are not accidentally exposed in logs or command history during debugging.
Audit Metadata