Skills
skills/indykite/skills/indykite-capture-upsert-nodes/Gen Agent Trust Hub

indykite-capture-upsert-nodes

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a bash script scripts/capture.sh that executes curl to send data to the IndyKite API and jq to validate the JSON structure of the payload.
  • [DATA_EXFILTRATION]: The skill is designed to transmit data to eu.api.indykite.com or us.api.indykite.com. The included shell script scripts/capture.sh implements a security check (host pinning) that prevents the script from sending credentials to any domain other than the official IndyKite API hosts.
  • [CREDENTIALS_UNSAFE]: The skill handles authentication via an API_KEY environment variable. The scripts/capture.sh script includes a --print mode designed for debugging which explicitly redacts the API key to prevent accidental exposure in logs or terminal output.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 07:00 AM
Security Audit — agent-trust-hub — indykite-capture-upsert-nodes