sumsub-integrate-travel-rule
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The authentication logic in
sumsub_curl.shand the Node.js example uses standard HMAC-SHA256 signing, protecting credentials while interacting with the API.\n- [SAFE]: The inclusion of a sandbox token prefix check (sbx:) in the primary communication script provides an important security guardrail for developers to avoid accidental operations on production data.\n- [SAFE]: Thebuild_query.pyutility correctly sanitizes user-provided search criteria using URL encoding, effectively mitigating potential path injection vulnerabilities in API queries.\n- [SAFE]: No malicious patterns such as obfuscation, unauthorized network exfiltration, or persistence mechanisms were detected in the skill's instructions or supporting scripts.
Audit Metadata