skills/l3-igrant/skills/igrantio-api-issuer/Snyk

igrantio-api-issuer

Warn

Audited by Snyk on Oct 28, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to fetch external claims schemas from arbitrary URIs via POST /v2/config/digital-wallet/openid/sdjwt/credential-definition/preview, which allows outsider-authored text ingestion.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 28, 2026, 10:08 AM

Issues

1