sumsub-api-auth
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides
scripts/sumsub_curl.shandscripts/sumsub_sign.pywhich are used to generate signatures and perform API requests. The scripts handle standard environment variables for authentication and enforce a sandbox-only policy by default (requiring a 'sbx:' prefix on tokens). - [SAFE]: The skill explicitly instructs the user to store credentials in
.envor.claude/settings.local.json, following security best practices for secret management. It also provides a clear warning mechanism to refuse production tokens, reducing the risk of accidental data exposure.
Audit Metadata