igrantio-credential-schema-payment-wallet-attestation
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill links to external schema and metadata files located at github.com/decentralised-dataexchange/verifiable-data-registry. These resources are intended to be used as templates for credential definitions and are standard for the described service.
- [DATA_EXFILTRATION]: No unauthorized data access or transmission patterns were found. The documentation specifies that credentials use truncated card identifiers (like last four digits) rather than sensitive full primary account numbers.
- [PROMPT_INJECTION]: The skill documentation defines a surface for indirect prompt injection by describing how to ingest and process external credential data (e.g., via the 'paymentWalletAttestation' field).
- Ingestion points: The 'paymentWalletAttestation' field in API requests described in SKILL.md.
- Boundary markers: No specific boundary markers or 'ignore' instructions are provided in the static schema.
- Capability inventory: The skill contains no executable scripts or system command capabilities.
- Sanitization: No sanitization or validation logic is implemented in this documentation file.
Audit Metadata