igrantio-individuals
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard security practices for managing sensitive credentials, using
.envfiles and environment variables for the OWS API key while explicitly instructing that these should never be exposed to the browser. - [SAFE]: Network operations are confined to official iGrant.io infrastructure (e.g.,
demo-api.igrant.io,staging-api.igrant.io) for the purpose of consent management and user onboarding. - [SAFE]: All identified Node.js dependencies (express, dotenv, cors) are well-known, legitimate packages used according to their intended purposes.
- [SAFE]: The provided reference code includes clear security guidance, such as ensuring user IDs originate from authenticated sessions rather than untrusted request inputs.
Audit Metadata