igrantio-credential-schema-authenticator
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of documentation and metadata. No executable scripts or code files are included.
- [EXTERNAL_DOWNLOADS]: The skill references JSON schema templates hosted on GitHub (decentralised-dataexchange/verifiable-data-registry). These are static data files used for credential definition configuration.
- [CREDENTIALS_UNSAFE]: The documentation mentions the requirement for an iGrant.io API key but correctly advises storing it in environment variables or secret managers, explicitly stating it should not be exposed to the browser.
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for processing credential data. While this represents a potential data ingestion surface for agents implementing this schema, the skill itself lacks executable capabilities and serves as a static reference.
Audit Metadata