The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/verify_phone.py provides a CLI interface for interacting with the Didit API. It is a standard wrapper for API calls and does not allow for arbitrary command injection or dangerous subprocess execution.
[EXTERNAL_DOWNLOADS]: The skill makes legitimate network requests to the vendor's official API endpoints (verification.didit.me, apx.didit.me) for its intended purpose. No suspicious external downloads or remote code executions were detected.
[CREDENTIALS_UNSAFE]: The skill correctly uses an environment variable (DIDIT_API_KEY) for authentication. There are no hardcoded credentials in the provided files.
[DATA_EXFILTRATION]: No patterns of unauthorized data exfiltration were found. Data (phone numbers, IP, device signals) is sent exclusively to the vendor's API as part of the core functionality described in the documentation.
[PROMPT_INJECTION]: No prompt injection attempts or bypass markers were detected in the instructions or metadata.

didit-phone-verification