sumsub-check-databases
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a bash script (
scripts/check_databases.sh) to perform API calls. This script includes safety checks to prevent the accidental use of production credentials and uses standard system utilities (openssl, curl) for authentication and networking. - [INDIRECT_PROMPT_INJECTION]: The skill processes structured JSON data fetched from the Sumsub API (
api.sumsub.com). The ingestion point is the response returned by the bash script. While this is a surface for indirect injection, the risk is mitigated by the fact that the data originates from the vendor's own official API and the skill provides a strict schema for interpretation. The agent is instructed to treat specific fields as data labels rather than instructions. - [SAFE]: The network activity is restricted to the vendor's primary domain (
api.sumsub.com). The use of environment variables for secrets follows standard security practices for API integrations.
Audit Metadata