The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/preflight.sh script uses standard system utilities to perform environment checks to ensure the workspace is correctly configured before development starts. Evidence: Execution of curl, openssl, python3, and awk to validate credentials and connectivity to Sumsub APIs.
[EXTERNAL_DOWNLOADS]: The skill interacts with Sumsub's official API and identity domains, and references vendor libraries from a common registry. Evidence: Network requests to api.sumsub.com and id.sumsub.com for OIDC flows and applicant materialization; references to @sumsub/id-connect via unpkg.com for frontend button components.
[INDIRECT_PROMPT_INJECTION]: The skill integrates with external OIDC flows and processes identity data, which involves handling data from external sources as part of the identity federation process. Ingestion points: OIDC callback parameters such as code, state, and token are processed in examples/express-callback.js to facilitate user identity sharing. Boundary markers: The integration relies on standard OIDC protocol boundaries and state parameters for CSRF protection. The documentation highlights the importance of JWT signature verification for production environments. Capability inventory: The skill performs network API requests to Sumsub services using fetch and curl, and performs file system operations to scaffold the integration code. Sanitization: The provided backend example includes HTML escaping for rendering results and explicitly recommends production-grade JWT validation against Sumsub's public keys.

sumsub-integrate-id-connect