didit-case-management
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts exclusively with the 'didit.me' domain and its subdomains, which are the official resources for the 'didit-protocol' vendor. No unauthorized data exfiltration or suspicious network destinations were found.
- [SAFE]: Authentication is handled correctly by instructing users to use environment variables (DIDIT_API_KEY) or placeholders for API keys, avoiding the exposure of hardcoded credentials.
- [SAFE]: The provided Python script (manage_cases.py) uses standard libraries (requests, json, argparse) and performs legitimate API operations without any dangerous dynamic execution or persistence mechanisms.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as case titles, notes, and AML screening results. While this provides a potential surface for indirect prompt injection, the risk is negligible as the skill uses this data only for structured API requests and does not perform high-risk operations like shell command construction or code evaluation.
Audit Metadata