igrantio-api-issuer
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFENO_CODEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documentation describes API endpoints that fetch content from user-provided external URIs, specifically through the
credentialDefinitionUriparameter in preview and issuance operations. This represents a potential surface for indirect prompt injection if an attacker provides a URI pointing to malicious instructions. - Ingestion points: The
credentialDefinitionUrifield in the/v2/config/digital-wallet/openid/sdjwt/credential-definition/previewendpoint and thePOST /v2/config/digital-wallet/openid/sdjwt/credential/issueoperation. - Boundary markers: Absent; the documentation does not suggest the use of delimiters or instructions to ignore embedded commands within the fetched schema files.
- Capability inventory: The skill enables the agent to perform network operations against the iGrant.io API, which then performs secondary fetches of external resources.
- Sanitization: The API documentation notes the acceptance of HTTP/HTTPS URIs but does not specify sanitization or validation of the retrieved content.
- [SAFE]: All referenced domains (igrant.io, demo-api.igrant.io) are official vendor resources associated with the skill author, l3-igrant. The authentication mechanisms described (API keys and Bearer tokens) follow standard security practices for API documentation.
Audit Metadata