igrantio-credential-schema-boarding-pass
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official vendor resources hosted on GitHub and the iGrant.io documentation site to provide schema templates and registration guidance for developers. These are legitimate resources used for verifying credential definitions.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a data ingestion surface for passenger and vessel information, which could be exploited if malicious content is included in these fields during credential issuance or verification.
- Ingestion points: External data enters via claims such as
firstName,lastName,seatNumber, andvesselDescriptionas defined in the schema insideSKILL.md. - Boundary markers: The skill does not implement specific delimiters or instructions to isolate untrusted content from the agent's internal logic.
- Capability inventory: This skill depends on
igrantio-api-issuer, which handles network communication and data transmission to the iGrant.io API. - Sanitization: The schema defines data structure but does not include logic for sanitizing, escaping, or validating the text content of the ticket claims for potentially malicious instructions.
Audit Metadata