indykite-capture-upsert-nodes

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a bash helper script (scripts/capture.sh) that uses curl to interact with the IndyKite API. The script implements security controls such as pinning the destination URL to official IndyKite domains (eu.api.indykite.com, us.api.indykite.com) and validating that the input is a valid JSON object using jq before transmission.
  • [DATA_EXFILTRATION]: The skill facilitates sending graph node data to IndyKite regional REST APIs. This is the primary intended function. The helper script prevents sending credentials or data to arbitrary external hosts by enforcing a strict case-match whitelist of authorized IndyKite API endpoints.
  • [CREDENTIALS_UNSAFE]: The skill uses an API_KEY (X-IK-ClientKey) for authentication. The instructions and helper script follow best practices by utilizing environment variables rather than hardcoding credentials. The script explicitly redacts the API key when using the --print flag to prevent accidental exposure in terminal output or logs.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data to construct JSON payloads for graph ingestion. This represents a surface for processing untrusted data, which the skill manages by using jq for structural validation and providing clear documentation on the expected schema for node properties and metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 07:08 AM
Security Audit — agent-trust-hub — indykite-capture-upsert-nodes