indykite-intent-agent

Pass

Audited by Gen Agent Trust Hub on Nov 5, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill handles natural language prompts and processes model-generated artifacts from the Intent Agent. * Ingestion points: The skill reads JSON-RPC responses containing artifact text from the Intent Agent in task.json. * Boundary markers: Documentation in SKILL.md and intent-reference.md contains explicit instructions to treat evaluations, reasons, and obligations as data for processing rather than instructions for the agent. * Capability inventory: The skill utilizes curl and jq within the scripts/intent.sh script to interact with the Intent Agent service. * Sanitization: Input prompts are escaped using jq when building requests, and output is parsed as structured JSON.
  • [COMMAND_EXECUTION]: The skill includes a bash script (scripts/intent.sh) that executes curl and jq commands to communicate with the Intent Agent API. The script uses bash arrays and jq-based JSON construction to handle variables safely.
  • [DATA_EXFILTRATION]: The skill performs network operations to external endpoints, including IndyKite vendor domains (indykite.com, indykite.io) and well-known services like Google Gemini for intent extraction. It handles authentication credentials such as bearer tokens and API keys via environment variables.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 5, 2026, 07:41 AM