sumsub-create-transaction
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands to interact with system tools, specifically using
curlto transmit transaction payloads andopensslto compute secure HMAC-SHA256 signatures required for Sumsub API authentication. - [EXTERNAL_DOWNLOADS]: Performs network requests to the official Sumsub API domain
api.sumsub.comto submit transaction data for monitoring and risk scoring. - [CREDENTIALS_UNSAFE]: The skill documentation explicitly instructs the user to manage sensitive API credentials (token and secret key) through environment variables rather than hardcoding them. It also includes specific validation logic to ensure only sandbox tokens (prefixed with
sbx:) are accepted by default, reducing the risk of exposing production environments.
Audit Metadata