igrantio-dcql-query-authenticator

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill uses a questionnaire to collect environment and configuration details from the user, which are then used to build API requests. This represents a standard configuration pattern.
  • Ingestion points: User configuration collected via the questionnaire in SKILL.md.
  • Boundary markers: None present.
  • Capability inventory: Potential network operations via the igrantio-api-verifier dependency for API interaction.
  • Sanitization: The skill explicitly recommends storing sensitive API keys in environment variables or secret managers, following security best practices.
  • [EXTERNAL_DOWNLOADS]: The skill references schema definitions and source documentation from the official decentralised-dataexchange repository on GitHub to ensure template accuracy.
  • [SAFE]: No malicious patterns or security risks were identified. The skill follows best practices for secret management and correctly identifies its source of truth.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 11:42 PM