igrantio-dcql-postal-codes
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains instructional content and JSON templates for integrating with the iGrant.io Organisation Wallet Suite.
- [EXTERNAL_DOWNLOADS]: The skill references documentation and API endpoints located on the vendor's official domains (igrant.io).
- [DATA_EXFILTRATION]: The skill includes explicit security guidance for API key management, instructing developers to use server-side environment variables or secret managers to prevent credential exposure.
- [INDIRECT_PROMPT_INJECTION]: The skill promotes secure data handling by advising that wallet-side matching be treated as a user experience feature, with mandatory server-side re-validation of claims as the actual enforcement point.
Audit Metadata