didit-fraud-check
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill processes and transmits sensitive user information, including personal identifiers (email, phone, government IDs) and selfie images, to the vendor's API endpoints at
verification.didit.me. This data handling is consistent with the primary purpose of a fraud prevention and identity verification tool and utilizes the vendor's own infrastructure.\n- [COMMAND_EXECUTION]: The inclusion ofscripts/run_fraud_check.pyallows for automated interactions with the Didit API. The script is structured to perform specific API requests and does not contain patterns for arbitrary command execution, persistence, or privilege escalation.\n- [EXTERNAL_DOWNLOADS]: The skill references the standardrequestsPython package for handling HTTP communication. No unverified third-party dependencies or remote script execution patterns were detected.
Audit Metadata