didit-database-validation
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill handles sensitive personal identification information (PII) including national ID numbers (DNI, CI, RUT, Cedula), tax numbers (CPF), and full names. This data is transmitted to official
didit.meAPI endpoints for validation, which is the stated and intended purpose of the skill. - [EXTERNAL_DOWNLOADS]: The skill utilizes the Python
requestslibrary to communicate withverification.didit.meandapx.didit.mefor authentication and database validation. All external communications target infrastructure owned by the vendordidit-protocol. - [COMMAND_EXECUTION]: The included utility
scripts/validate_database.pyis a standard CLI tool that processes specific user-provided flags. It does not contain patterns for arbitrary command execution, privilege escalation, or persistence. - [CREDENTIALS_UNSAFE]: The skill documentation provides illustrative examples for registration and OTP verification (e.g.,
A3K9F2,MyStr0ng!Pass). These are static placeholders for tutorial purposes and do not represent hardcoded secrets. Actual API keys are expected to be provided via theDIDIT_API_KEYenvironment variable.
Audit Metadata