igrantio-api-holder
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process external, untrusted data strings, specifically 'openid-credential-offer://' and 'openid4vp://' URIs.
- Ingestion points: Data enters the agent's context through parameters like
credentialOfferandvpTokenQrCodein SKILL.md. - Boundary markers: The skill does not provide explicit delimiters or instructions for the agent to treat these external strings as untrusted data separate from its own instructions.
- Capability inventory: The skill possesses the capability to perform various network operations (POST, PUT, GET, DELETE) against the iGrant.io API based on the processed inputs.
- Sanitization: While the skill mentions basic formatting (stripping spaces from PIN codes), it does not specify sanitization or validation protocols for the incoming URIs themselves, relying on the external API backend for security enforcement.
- [SAFE]: The skill follows security best practices by explicitly instructing users to store sensitive API keys in environment variables or secret managers, ensuring they remain on the server and are never exposed to the browser.
- [SAFE]: All referenced network endpoints (e.g., demo-api.igrant.io) and documentation links (docs.igrant.io) are official vendor-owned resources for iGrant.io.
Audit Metadata