igrantio-holder-notifications
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or safety bypasses were detected in the instructions or scripts. The decision table logic in the client is strictly functional.
- [EXTERNAL_DOWNLOADS]: The skill references documentation and API endpoints located at
docs.igrant.io, which is the official domain for the service provider. - [DATA_EXFILTRATION]: The skill includes a server-side relay implementation (
notificationsSse.ts) that correctly handles API keys in a backend environment to avoid exposing sensitive credentials to the client-side/browser environment. The use of query parameters for SSE authentication is noted and mitigated by the recommended relay pattern.
Audit Metadata