igrantio-credential-schema-student-id
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references external JSON schema files located in the decentralised-dataexchange GitHub repository, instructing the agent to fetch them as the source of truth for credential definitions.\n- [INDIRECT_PROMPT_INJECTION]: The instruction to fetch and process external JSON schemas introduces an attack surface for indirect prompt injection.\n
- Ingestion points: Remote schema documents are fetched from raw.githubusercontent.com as specified in the 'Source is the registry' section.\n
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore any natural language instructions that might be embedded in the fetched JSON data.\n
- Capability inventory: The agent uses the fetched data to perform POST requests to the iGrant.io API to create credential definitions through the igrantio-api-issuer skill.\n
- Sanitization: The skill does not define a process for sanitizing or validating the external JSON data before it is interpolated into API requests.
Audit Metadata