sumsub-integrate-dint-websdk

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill integrates the official vendor module @sumsub/fisherman (Category 4). The installation and usage follow the developer's documentation for enhancing fraud detection.
  • [SAFE]: The skill uses openssl for HMAC signing and curl to interact with official Sumsub API endpoints (https://api.sumsub.com). These are standard administrative and integration operations (Category 2).
  • [SAFE]: A safety check is implemented in the shell script examples/read-device-results.sh to ensure only sandbox tokens (prefixed with sbx:) are used during integration, preventing accidental exposure of production credentials.
  • [SAFE]: The examples/fisherman-self-render.ts file demonstrates a standard singleton pattern for managing a specific frontend SDK's lifecycle, including initialization and cleanup, which is appropriate for its stated purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 09:35 PM
Security Audit — agent-trust-hub — sumsub-integrate-dint-websdk