sumsub-create-poa-preset

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides tools to create and update Proof-of-Address presets on the Sumsub platform. It follows a structured procedure for data validation and API interaction.\n- [COMMAND_EXECUTION]: The skill utilizes local shell and Python scripts to perform its tasks. These scripts generate HMAC signatures for authentication and use standard tools like curl to interact with the API. The implementation is transparent and restricted to the necessary operations.\n- [EXTERNAL_DOWNLOADS]: The skill makes network requests to https://api.sumsub.com, the official endpoint for the Sumsub identity verification service. This is a well-known service, and the usage is consistent with the skill's purpose.\n- [SAFE]: Sensitive environment variables for API authentication are handled with safety checks. The skill validates that the provided SUMSUB_APP_TOKEN is a sandbox token (prefixed with sbx:), mitigating the risk of accidental production data modification or credential exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 09:59 PM
Security Audit — agent-trust-hub — sumsub-create-poa-preset