igrantio-api-user-management
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official OpenAPI specifications and documentation from the vendor's domain (
docs.igrant.io). These references are used for schema verification and informational purposes and do not involve the execution of remote scripts or unverified code. - [INDIRECT_PROMPT_INJECTION]: The skill describes endpoints for updating admin profile data and uploading avatar images (ingestion points in
SKILL.md). While the skill does not explicitly define boundary markers or sanitization for these inputs, the capabilities are restricted to network API calls targeting the vendor's own infrastructure for the purpose of account management. - [SAFE]: The skill implements standard authentication patterns using Bearer tokens and provides clear instructions for keeping sensitive API keys in secure server-side environments, preventing exposure to the client-side environment.
Audit Metadata