indykite-capture-upsert-relationships

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The helper script scripts/capture.sh executes curl to interact with the IndyKite REST API and jq to validate the JSON payload structure before processing.
  • [EXTERNAL_DOWNLOADS]: The skill performs network operations via curl targeting official IndyKite API endpoints (eu.api.indykite.com and us.api.indykite.com) for data ingestion.
  • [CREDENTIALS_UNSAFE]: The skill requires an API_KEY (AppAgent credential) provided via environment variables. The helper script implements a security check that restricts the destination URL to verified IndyKite hosts, preventing credential leakage to unauthorized domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 07:00 AM
Security Audit — agent-trust-hub — indykite-capture-upsert-relationships