didit-database-validation
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The utility script
scripts/validate_database.pyrequires therequestsPython library, a standard third-party package for making HTTP requests. - [COMMAND_EXECUTION]: The skill includes a Python script intended for execution to perform database lookups and biometric checks.
- [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection due to its handling of user-supplied identity data and external registry records.
- Ingestion points: Untrusted data enters the system through personal identity fields (e.g., names, ID numbers, addresses) passed to the
validate_database.pyscript. - Boundary markers: The provided scripts do not implement specific delimiters to isolate untrusted user data from operational instructions.
- Capability inventory: The skill possesses network capabilities to transmit sensitive identity data to the
verification.didit.meAPI for validation. - Sanitization: The script implements basic input validation, including regex checks for ISO country codes and size/format constraints for selfie image uploads.
Audit Metadata