igrantio-api-webhooks
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of external webhook data from the iGrant.io service.
- Ingestion points: The skill defines a payload URL receiving HTTP POST deliveries in SKILL.md.
- Boundary markers: No specific delimiters are defined for the JSON data payload content.
- Capability inventory: No executable tools or scripts are provided within this skill.
- Sanitization: The skill explicitly instructs on implementing HMAC-SHA256 signature verification via the X-IGrant-Signature header.
- [SAFE]: The skill follows security best practices by advising the use of environment variables or secret managers for sensitive credentials and providing warnings about sensitive data returned in clear text in API responses.
Audit Metadata