indykite-capture-delete-nodes
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a bash helper script (
scripts/capture.sh) that executes shell commands includingcurlandjq. The script implements a security check to pin the API destination to trusted IndyKite domains (eu.api.indykite.comorus.api.indykite.com), ensuring that authentication tokens are not sent to unauthorized external hosts. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data (external IDs and node types) to construct a JSON request body. The included script uses
jqto validate the JSON structure before transmission, effectively mitigating risks associated with malformed data or schema confusion attacks.
Audit Metadata