didit-fraud-check

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXFILTRATION]: The skill processes and transmits sensitive user information, including personal identifiers (email, phone, government IDs) and selfie images, to the vendor's API endpoints at verification.didit.me. This data handling is consistent with the primary purpose of a fraud prevention and identity verification tool and utilizes the vendor's own infrastructure.\n- [COMMAND_EXECUTION]: The inclusion of scripts/run_fraud_check.py allows for automated interactions with the Didit API. The script is structured to perform specific API requests and does not contain patterns for arbitrary command execution, persistence, or privilege escalation.\n- [EXTERNAL_DOWNLOADS]: The skill references the standard requests Python package for handling HTTP communication. No unverified third-party dependencies or remote script execution patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 10:27 AM