indykite-capture-delete-node-properties
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a bash script (
scripts/capture.sh) that usescurlto interact with the IndyKite API. The script implements security controls including host-pinning to official domains (eu.api.indykite.com,us.api.indykite.com) to prevent credential exfiltration to arbitrary hosts. It also provides a--printmode that redacts theAPI_KEYto prevent accidental exposure in logs or terminal output.- [EXTERNAL_DOWNLOADS]: The skill references official IndyKite documentation and OpenAPI specifications hosted onindykite.comdomains. These are well-known vendor resources and do not represent a security risk.
Audit Metadata