didit-face-search
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation and scripts communicate with official Didit domains (didit.me, verification.didit.me, apx.didit.me) for authentication, billing, and biometric processing. These are legitimate endpoints for the service provided by the vendor.
- [COMMAND_EXECUTION]: The utility script
scripts/search_faces.pyuses the standardrequestslibrary to interact with the API. It does not perform any dangerous command execution or subprocess spawning with untrusted input. - [CREDENTIALS_UNSAFE]: The skill correctly instructs users to provide the
DIDIT_API_KEYvia an environment variable and does not contain any hardcoded secrets or sensitive information.
Audit Metadata