igrantio-issuer-frontend

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a standard frontend architecture for interacting with the iGrant.io Organisation Wallet Suite (OWS). It provides a memoized OWS client and React hooks (useIssuance, useSSE, usePolledResource) to manage the issuance flow without exposing sensitive logic.
  • [SAFE]: The code correctly identifies and mitigates the risk of credential exposure. The SKILL.md and owsClient.ts files explicitly state that API keys should not be included in the browser bundle, relying instead on a backend proxy to inject the necessary authorization headers.
  • [SAFE]: External dependencies are restricted to well-known libraries (qrcode, react) for UI rendering and QR code generation. All documentation and API references point to official igrant.io domains, which are consistent with the skill author, L3-iGrant.
  • [SAFE]: Network operations are conducted via standard fetch and EventSource APIs to user-defined proxyBaseUrl and webhookBaseUrl endpoints, which is typical for configurable frontend clients.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 09:48 AM
Security Audit — agent-trust-hub — igrantio-issuer-frontend