indykite-capture-upsert-nodes
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill and its associated assets are designed for legitimate interaction with the IndyKite Capture API. The analysis found no evidence of malicious intent, obfuscation, or unauthorized data access.- [COMMAND_EXECUTION]: The skill provides a Bash script (
scripts/capture.sh) to facilitate API requests. The script implements defensive programming practices, including host-pinning to ensure credentials are only sent to IndyKite's official endpoints (eu.api.indykite.comandus.api.indykite.com), and JSON validation usingjqto prevent malformed payloads.- [CREDENTIALS_SAFE]: The skill utilizes environment variables for secret management (API_KEY), which is a standard and secure method for providing credentials to automated scripts without hardcoding them.
Audit Metadata