sumsub-manage-applicant-tags
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches and displays external data from Sumsub applicant profiles (such as names and existing tags) which are controlled by users outside the agent's immediate environment. This data is placed into the agent's context without sanitization.
- Ingestion points: The
read_backfunction inscripts/manage_applicant_tags.shparses JSON data from theGET /resources/applicants/{applicantId}/oneendpoint. - Boundary markers: Applicant data is printed directly to the context without delimiters or instructions for the agent to ignore potentially malicious embedded content.
- Capability inventory: The skill uses the
Bashtool to execute API requests, sign payloads using OpenSSL, and process JSON with Python. It also hasWritepermissions. - Sanitization: No sanitization or filtering is performed on the applicant-supplied strings (like names or tags) before they are surfaced to the agent.
Audit Metadata