Skills
skills/indykite/skills/indykite-capture-delete-nodes/Gen Agent Trust Hub

indykite-capture-delete-nodes

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a Bash helper script (scripts/capture.sh) that executes curl to interact with the IndyKite API. This script contains a security feature that validates the API_URL environment variable against a whitelist of legitimate IndyKite hosts (eu.api.indykite.com and us.api.indykite.com). This prevents the transmission of credentials to unauthorized or malicious destinations.
  • [SAFE]: No malicious patterns such as prompt injection, obfuscation, or unauthorized data exfiltration were detected. The skill manages credentials securely via environment variables and includes data integrity checks using jq to verify the structure of generated JSON payloads before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 07:00 AM
Security Audit — agent-trust-hub — indykite-capture-delete-nodes