sumsub-check-permissions
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or safety bypass attempts were detected. The skill performs a legitimate administrative task consistent with its stated purpose.
- [COMMAND_EXECUTION]: The skill executes a local Bash script (
scripts/check_permissions.sh) to perform API requests. The script uses standard system utilities such asopensslfor secure HMAC-SHA256 signature generation andcurlfor network communication. - [EXTERNAL_DOWNLOADS]: The script communicates with the official Sumsub API endpoint (
api.sumsub.com). As this is a well-known service and the vendor's own infrastructure, this is considered safe and standard functionality for the skill's purpose.
Audit Metadata