didit-transaction-monitoring

Pass

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a utility script scripts/submit_transaction.py designed to be executed via the command line to interface with the Didit API. The script uses standard libraries (argparse, requests) and includes error handling for missing credentials.
  • [DATA_EXFILTRATION]: The skill transmits transaction and identity data to verification.didit.me and apx.didit.me. This communication is essential to the skill's functionality and targets the vendor's primary API infrastructure.
  • [CREDENTIALS_UNSAFE]: The skill requires a DIDIT_API_KEY, which is correctly managed through environment variables. The documentation provides clear instructions for registering and verifying credentials via official vendor endpoints.
  • [DATA_EXPOSURE]: Instructions in SKILL.md include example registration payloads with dummy credentials. These are standard documentation practices and do not expose sensitive user data.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 11, 2026, 12:47 PM
Security Audit — agent-trust-hub — didit-transaction-monitoring