sumsub-check-skills-version

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs a version check against https://api.sumsub.com/llms.txt. This is a legitimate update-check mechanism targeting the vendor's own official domain. The implementation uses standard curl commands with reasonable timeouts and no sensitive data transmission.
  • [SAFE]: The execution of shell scripts (check_version.sh and render_headsup.sh) is restricted to version comparison and caching a markdown notification string for the user. No dangerous command execution or privilege escalation patterns were detected.
  • [SAFE]: The skill uses a local cache file (.headsup_cache) within its own directory to manage state between execution phases, which is a standard practice for maintaining context in agent environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 02:03 PM