igrantio-api-webhooks
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill serves as documentation for the iGrant.io OID4VC API Webhook group. It does not contain any executable scripts, command-line operations, or code that could pose a direct security risk.
- [SAFE]: All credentials and secrets are represented by standard placeholders like
<key>and<shared-secret>. There are no hardcoded credentials or actual secrets exposed within the skill instructions. - [SAFE]: External URLs point to the official documentation and API specifications on the vendor's domain (
igrant.io). These are informative links provided for technical reference and do not involve untrusted remote code execution. - [SAFE]: The skill provides guidance on security best practices, such as instructions for verifying HMAC-SHA256 signatures (
X-IGrant-Signature) to validate the authenticity of incoming webhook deliveries.
Audit Metadata