Skills
skills/indykite/skills/indykite-capture-delete-node-properties/Gen Agent Trust Hub

indykite-capture-delete-node-properties

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a Bash helper script scripts/capture.sh that executes curl to interact with the IndyKite REST API. The script includes robust error handling and input validation.
  • [DATA_EXFILTRATION]: To protect sensitive credentials, the provided script scripts/capture.sh implements a host-pinning mechanism. It verifies that the API_URL environment variable matches the official regional IndyKite endpoints (eu.api.indykite.com or us.api.indykite.com) before attaching the API_KEY to the request headers. This prevents the token from being accidentally sent to an arbitrary external server.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 07:00 AM
Security Audit — agent-trust-hub — indykite-capture-delete-node-properties