indykite-ciq-add-relationship-property
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/execute.shscript usescurlto make POST requests to the IndyKite API. It handles authentication tokens and API keys through environment variables, which is a standard and secure practice for CLI tools.- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied JSON data through theinput_paramsargument inscripts/execute.sh. This data is interpolated into the request body sent to the IndyKite API. While this is the intended functionality, it constitutes an attack surface where maliciously crafted input could potentially influence downstream processes if the API response is interpreted by an LLM. - Ingestion points: The script
scripts/execute.shreads input parameters from a file or stdin. - Boundary markers: No specific boundary markers or 'ignore' instructions are used for the input parameters.
- Capability inventory: The script performs network POST operations to a configurable
API_URLusingcurl. - Sanitization: The input is treated as a JSON object and passed directly to the API without further sanitization or validation in the script.
Audit Metadata