igrantio-ows-overview
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is documentation-only, consisting of Markdown files that provide integration guidance, API schemas, and architecture overviews. It contains no scripts, binaries, or automated command execution.
- [SAFE]: All referenced API endpoints (e.g.,
*.igrant.io) and documentation links belong to the official vendor infrastructure. These are documented for developer reference and do not involve unauthorized data access. - [SAFE]: Sensitive information such as API keys and webhook secrets are handled as placeholders (e.g.,
<key>,<shared HMAC secret>). The documentation explicitly instructs developers to keep these keys on the tenant backend and never expose them to the browser/client-side. - [SAFE]: The integration patterns described (HMAC signature verification for webhooks and SSE-based event correlation) represent standard and secure industry practices for digital credential flows.
Audit Metadata