phone-verification

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues detected. The skill provides instructions for sending and verifying SMS one-time codes using the Didit API.
  • [CREDENTIALS_UNSAFE]: The skill correctly uses environment variables (ORTHOGONAL_API_KEY) for API authentication instead of hardcoding secrets.
  • [COMMAND_EXECUTION]: The skill uses the vendor's own CLI tool (orth) to interact with the API, which is expected behavior for this platform.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 05:57 PM