sumsub-check-permissions
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to the official Sumsub API endpoint (
api.sumsub.com) to retrieve the current tenant's background check entitlements. - [DATA_EXFILTRATION]: The script transmits API authentication tokens to the vendor's official domain. These credentials are required for authorized API access and are securely handled via environment variables (
SUMSUB_APP_TOKENandSUMSUB_SECRET_KEY) rather than being hardcoded in the source code.
Audit Metadata