igrantio-dcql-query-sca-payment-account
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill encourages secure API key management by instructing users to keep credentials in environment variables or secret managers and never exposing them to the browser.
- [SAFE]: External URLs and resources directed to the iGrant.io support team and the official verifiable data registry on GitHub are contextually appropriate for the skill's functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill instructions facilitate the ingestion of external data from a public registry for schema verification.
- Ingestion points: The agent is instructed to access JSON schema files from the
decentralised-dataexchange/verifiable-data-registryrepository on GitHub. - Boundary markers: The skill does not provide specific delimiters or warnings for the content fetched from the external registry.
- Capability inventory: The skill provides query templates and refers to
igrantio-api-verifierfor full operational capabilities. - Sanitization: No specific sanitization or validation logic is defined for the external registry data within the skill instructions.
Audit Metadata