igrantio-eu-age-verification
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to synchronize its behavior with the official iGrant.io documentation.
- Ingestion points: The agent is directed to fetch and follow content from
https://docs.igrant.io/docs/eu-age-verification/if it differs from the skill instructions in SKILL.md. - Boundary markers: The skill does not define specific boundaries or ignore-instructions markers for the external content fetched from the documentation site.
- Capability inventory: The agent generates code for issuer and verifier workflows, including API calls to OWS endpoints.
- Sanitization: No explicit sanitization or validation of the fetched documentation content is required by the skill, though the source is the vendor's official domain.
- [SAFE]: The skill implements best practices for secret management and configuration.
- Evidence: It explicitly instructs the user to store OWS API keys in environment variables or secret managers and ensures they are kept server-side, preventing exposure to the client-side browser environment.
Audit Metadata