didit-biometric-age-estimation

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a Python script scripts/estimate_age.py that allows users to perform age estimation from the command line by interacting with the Didit API.- [DATA_EXFILTRATION]: The skill transmits local facial image files to the vendor's API at https://verification.didit.me/v3/age-estimation/ to perform its primary function. This communication is conducted with the vendor's own infrastructure.- [EXTERNAL_DOWNLOADS]: The utility script estimate_age.py relies on the standard requests library, which must be installed in the user's environment.- [INDIRECT_PROMPT_INJECTION]: The skill processes facial images provided by users, which serves as an ingestion point for external data.
  • Ingestion points: Image file paths passed to the estimate_age.py script (e.g., in the image argument).
  • Boundary markers: None present in the script or instructions.
  • Capability inventory: The skill has the capability to read local files and perform network requests via the requests library.
  • Sanitization: No specific validation of the API response is performed before it is printed to the console.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 08:44 PM
Security Audit — agent-trust-hub — didit-biometric-age-estimation