indykite-capture-delete-node-property-metadata
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a bash script (
scripts/capture.sh) to interact with the IndyKite Capture API. The script implements host pinning, which restricts network requests to official IndyKite domains (eu.api.indykite.com and us.api.indykite.com), preventing the accidental transmission of credentials to unauthorized hosts. - [CREDENTIALS_UNSAFE]: The helper script manages authentication via environment variables rather than hardcoded secrets. It includes a specific safety feature in its
--printmode to redact theAPI_KEY(ClientKey) to prevent token exposure in terminal logs or command history. - [EXTERNAL_DOWNLOADS]: The skill references official IndyKite regional API endpoints and developer documentation, which are trusted resources belonging to the skill's author.
- [SAFE]: The skill follows secure coding practices, including input validation via
jqto ensure that only well-formed JSON objects are processed by the communication script.
Audit Metadata