The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes a helper script scripts/capture.sh that executes curl and jq. The script implements security controls by pinning the API_URL variable to specific, official IndyKite domains (https://eu.api.indykite.com and https://us.api.indykite.com). This prevents the script from sending credentials to unauthorized or attacker-controlled hosts if the environment variables are misconfigured.
[CREDENTIALS_UNSAFE]: Authentication is handled via environment variables (API_KEY) rather than hardcoded strings, following standard security practices for credential management. Additionally, the script's --print functionality includes logic to redact the API key from the output to prevent accidental exposure in terminal logs or console history.
[EXTERNAL_DOWNLOADS]: The skill references and makes network requests to official IndyKite API endpoints. These network operations are limited to the vendor's own infrastructure and are necessary for the primary function of the skill.
[DATA_EXFILTRATION]: The script performs a validation check using jq to ensure that only well-formed JSON objects are forwarded to the API, mitigating risks associated with piping unvalidated or malicious input into the network request.

indykite-capture-delete-relationship-properties