igrantio-individuals

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements standard security practices for managing sensitive credentials, using .env files and environment variables for the OWS API key while explicitly instructing that these should never be exposed to the browser.
  • [SAFE]: Network operations are confined to official iGrant.io infrastructure (e.g., demo-api.igrant.io, staging-api.igrant.io) for the purpose of consent management and user onboarding.
  • [SAFE]: All identified Node.js dependencies (express, dotenv, cors) are well-known, legitimate packages used according to their intended purposes.
  • [SAFE]: The provided reference code includes clear security guidance, such as ensuring user IDs originate from authenticated sessions rather than untrusted request inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 11:41 PM