indykite-ciq-create-node-with-link
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a bash helper script (scripts/execute.sh) and documented commands using curl and jq to interact with IndyKite's APIs. This is standard for CLI-based integration tools.
- [EXTERNAL_DOWNLOADS]: The skill interacts with IndyKite's official API endpoints (eu.api.indykite.com and us.api.indykite.com). These are recognized vendor resources for the 'indykite' author.
- [INDIRECT_PROMPT_INJECTION]: The skill processes input_params provided by the user/agent and passes them to the IndyKite API. 1. Ingestion points: User-provided input_params in SKILL.md and scripts/execute.sh. 2. Boundary markers: Standard JSON structure for API payloads. 3. Capability inventory: Network operations via curl and local data processing via jq and bash. 4. Sanitization: Relies on API-side validation of parameters.
Audit Metadata