indykite-ciq-create-relationship
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The bash script
scripts/execute.shuses the localcurlbinary to perform network requests to the IndyKite REST API. This is the core functionality required to execute CIQ operations and is limited to official vendor domains.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided input parameters for use in graph queries, representing a standard input surface for this type of tool.\n - Ingestion points: External JSON parameters are passed as arguments or via stdin to the
scripts/execute.shhelper script.\n - Boundary markers: The skill relies on structured JSON for data transport; the IndyKite platform employs a specific
$paramsyntax for Cypher variables, which provides separation between data and query logic.\n - Capability inventory: The skill is capable of performing network communication with the IndyKite REST API via the
curlcommand.\n - Sanitization: Input validation and parameter binding are handled by the IndyKite platform's policy engine, reducing the risk of injection during query execution.
Audit Metadata