igrantio-dcql-query-sca-payment-user
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references JSON schema files and documentation hosted on GitHub and iGrant.io domains. These references are used to maintain consistency with the official verifiable data registry.
- [CREDENTIALS_UNSAFE]: The documentation includes explicit security guidance regarding API keys, instructing users to store them in server-side environment variables or secret managers rather than exposing them to the client or hardcoding them.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the construction of structured queries (DCQL) for payment authorization. While it handles user-provided parameters for these queries, the use of defined JSON schemas for transaction data provides a validation layer for the structured input.
Audit Metadata