indykite-capture-upsert-nodes
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a bash helper script (
scripts/capture.sh) that usescurlto interact with the IndyKite API. The script implements security controls such as pinning the destination URL to official IndyKite domains (eu.api.indykite.com,us.api.indykite.com) and validating that the input is a valid JSON object usingjqbefore transmission. - [DATA_EXFILTRATION]: The skill facilitates sending graph node data to IndyKite regional REST APIs. This is the primary intended function. The helper script prevents sending credentials or data to arbitrary external hosts by enforcing a strict case-match whitelist of authorized IndyKite API endpoints.
- [CREDENTIALS_UNSAFE]: The skill uses an
API_KEY(X-IK-ClientKey) for authentication. The instructions and helper script follow best practices by utilizing environment variables rather than hardcoding credentials. The script explicitly redacts the API key when using the--printflag to prevent accidental exposure in terminal output or logs. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data to construct JSON payloads for graph ingestion. This represents a surface for processing untrusted data, which the skill manages by using
jqfor structural validation and providing clear documentation on the expected schema for node properties and metadata.
Audit Metadata