sumsub-check-skills-version

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs a version check by comparing a local file (references/version.txt) with a remote endpoint (https://api.sumsub.com/llms.txt).
  • [EXTERNAL_DOWNLOADS]: The skill uses curl to fetch version information from api.sumsub.com, which is the official domain for the Sumsub service (well-known technology company). This operation does not involve sensitive data and uses a short timeout (5 seconds).
  • [COMMAND_EXECUTION]: The skill executes local bash scripts (check_version.sh and render_headsup.sh) to perform version comparison logic and manage a local cache file. These operations are restricted to the skill's own directory.
  • [PROMPT_INJECTION]: The instructions contain guidance for the AI on how to handle version drift and surface warnings to the user. These instructions are functional and do not attempt to bypass safety filters or override agent constraints.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 09:58 PM
Security Audit — agent-trust-hub — sumsub-check-skills-version