sumsub-check-skills-version
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
curlto fetch a public version manifest fromhttps://api.sumsub.com/llms.txt. This is a standard version check against the vendor's own infrastructure and involves no sensitive data or credentials. - [COMMAND_EXECUTION]: The skill executes local bash scripts (
check_version.shandrender_headsup.sh) to compare version strings and manage a local cache file (.headsup_cache). These scripts are self-contained and perform legitimate version management logic. - [REMOTE_CODE_EXECUTION]: While the skill downloads content from a remote URL, it only parses version strings using
grepandsed. It does not execute the downloaded content as code or pipe it to a shell.
Audit Metadata