indykite-data-schema
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill allows users to retrieve schema-level information from the IndyKite Knowledge Graph using the vendor's official REST API. It specifically excludes graph data contents from its scope, focusing only on structural metadata.\n- [SAFE]: The bash script
scripts/read-schema.shhandles sensitive AppAgent credentials by reading them from an environment variable (API_KEY) and explicitly validating the targetAPI_URLagainst a whitelist of trusted IndyKite domains (eu.api.indykite.comandus.api.indykite.com). This implementation prevents the transmission of credentials to unauthorized or malicious hosts.\n- [SAFE]: No malicious patterns such as prompt injection, obfuscation, persistence mechanisms, or unauthorized privilege escalation were detected across the skill's instructions and reference documentation.
Audit Metadata