sumsub-resolve-currency
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell scripts (
get_currencies.sh,sumsub_curl.sh) and a Python script (resolve_currency.py) to interact with the Sumsub API. These scripts are purpose-built for the skill's primary function and do not exhibit signs of arbitrary command injection or malicious intent. Thesumsub_curl.shscript includes a safeguard that refuses tokens lacking thesbx:prefix unless an explicit environment variable (SUMSUB_ALLOW_PROD=1) is set, reducing the risk of accidental production credential exposure.
Audit Metadata