igrantio-dcql-query-software-statement
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is entirely instructional, providing DCQL query templates and guidelines for interacting with a developer to configure software statement credentials. It does not include any executable scripts, binaries, or platform-specific commands.
- [CREDENTIALS_UNSAFE]: While the skill mentions the requirement of an iGrant.io API key, it specifically advises the agent to instruct the user to store such credentials securely in environment variables or a secret manager, preventing exposure to the client-side application.
- [EXTERNAL_DOWNLOADS]: The skill references documentation and schema files hosted on the iGrant.io verifiable data registry via GitHub. These are used as authoritative references for the agent to ensure claim paths match the latest registry versions.
Audit Metadata