didit-database-validation

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill handles sensitive personal identification information (PII) including national ID numbers (DNI, CI, RUT, Cedula), tax numbers (CPF), and full names. This data is transmitted to official didit.me API endpoints for validation, which is the stated and intended purpose of the skill.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the Python requests library to communicate with verification.didit.me and apx.didit.me for authentication and database validation. All external communications target infrastructure owned by the vendor didit-protocol.
  • [COMMAND_EXECUTION]: The included utility scripts/validate_database.py is a standard CLI tool that processes specific user-provided flags. It does not contain patterns for arbitrary command execution, privilege escalation, or persistence.
  • [CREDENTIALS_UNSAFE]: The skill documentation provides illustrative examples for registration and OTP verification (e.g., A3K9F2, MyStr0ng!Pass). These are static placeholders for tutorial purposes and do not represent hardcoded secrets. Actual API keys are expected to be provided via the DIDIT_API_KEY environment variable.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 08:44 PM
Security Audit — agent-trust-hub — didit-database-validation