igrantio-credential-schema-sca-payment-card
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from an external user (the integrator) to populate templates for sensitive API operations.
- Ingestion points: User answers regarding environment URLs, API keys, and credential claim configurations (SKILL.md).
- Boundary markers: Absent; the instructions do not include delimiters or warnings to prevent the agent from misinterpreting user-provided data as instructions.
- Capability inventory: The agent uses collected data to perform POST requests to the iGrant.io OWS API (
/v2/config/digital-wallet/openid/sdjwt/credential-definition). - Sanitization: No validation or escaping of the integrator's input is specified before it is interpolated into the JSON request body.
- [EXTERNAL_DOWNLOADS]: The skill fetches JSON schema and metadata files from an external repository to ensure it uses the latest registry definitions.
- Evidence: Downloads schema content from
https://raw.githubusercontent.com/decentralised-dataexchange/verifiable-data-registry/main/credentialSchemas/claimPathPointer/scaPaymentCard/2025.7.1/dc+sd-jwt.schema.json.
Audit Metadata