igrantio-dcql-query-loyalty-card
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data from verifiable credentials stored in a user's digital wallet. This content is retrieved via the iGrant.io API and processed by the agent.
- Ingestion points: The 'presentation' field within the verification history record retrieved from the iGrant.io API.
- Boundary markers: The template does not define specific delimiters or instructions for the agent to treat retrieved credential claims as untrusted content.
- Capability inventory: The skill is a template and does not perform operations directly; however, it is designed for use in conjunction with the 'igrantio-api-verifier' skill for network communication.
- Sanitization: No sanitization or validation logic is provided to filter external data before it is interpreted by the agent.
Audit Metadata