sumsub-check-permissions

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or safety bypass attempts were detected. The skill performs a legitimate administrative task consistent with its stated purpose.
  • [COMMAND_EXECUTION]: The skill executes a local Bash script (scripts/check_permissions.sh) to perform API requests. The script uses standard system utilities such as openssl for secure HMAC-SHA256 signature generation and curl for network communication.
  • [EXTERNAL_DOWNLOADS]: The script communicates with the official Sumsub API endpoint (api.sumsub.com). As this is a well-known service and the vendor's own infrastructure, this is considered safe and standard functionality for the skill's purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 09:59 PM
Security Audit — agent-trust-hub — sumsub-check-permissions