igrantio-verifier-frontend
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external API responses and Server-Sent Events (SSE) that provide the status and results of a credential presentation.\n
- Ingestion points: Untrusted data enters via
owsClient.tsthrough standard fetch calls to a configured proxy, and viasseClient.tsthrough EventSource messages.\n - Boundary markers: Data is handled as structured JSON; the disclosed claims are rendered inside a
<pre>tag in theVerifierFlow.tsxcomponent.\n - Capability inventory: The skill code is restricted to frontend rendering and API communication. It does not contain any capabilities for arbitrary code execution, subprocess spawning, or local file system access.\n
- Sanitization: Input data is parsed as JSON, and the application logic extracts specific fields for display without further processing that could lead to injection.\n- [EXTERNAL_DOWNLOADS]: The skill utilizes standard, well-known NPM packages for QR code rendering (
qrcodeandqrcode.react). It also provides links to the official vendor domain (igrant.io) for documentation and platform-specific wallet downloads.
Audit Metadata