The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes a Bash script (scripts/capture.sh) that executes curl to interact with the IndyKite Capture API. The script implements security best practices by pinning the target API_URL to known-safe IndyKite domains (eu.api.indykite.com, us.api.indykite.com) to prevent credentials from being sent to unauthorized hosts. The script also includes a --print mode that redacts sensitive environment variables like API_KEY when previewing commands.
[INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of JSON payloads using user-supplied inputs such as external_id, type, and location. This creates a standard surface for data-driven injections where malicious content could be embedded in these fields. However, the accompanying shell script mitigates risk by validating that the resulting payload is a well-formed JSON object using jq before transmission.

indykite-capture-delete-nodes