igrantio-qr-code
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a frontend UI component for displaying QR codes for iGrant.io wallet flows. All instructions and scripts are consistent with the stated purpose and follow secure development practices.
- [INDIRECT_PROMPT_INJECTION]: The WalletQrPanel component processes data such as URIs and labels passed from the host application.
- Ingestion points: Data enters the component via props in references/ui/WalletQrPanel.tsx (uri, logoSrc, txCode, labels).
- Boundary markers: The component uses standard React JSX interpolation, which automatically escapes content to prevent basic injection attacks.
- Capability inventory: The skill is a pure UI component and does not possess capabilities for file writing, network requests, or system command execution.
- Sanitization: React's default rendering mechanisms provide sufficient sanitization for the intended use case.
Audit Metadata