didit-email-verification

Pass

Audited by Gen Agent Trust Hub on Mar 3, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or safety bypass attempts were detected in the skill files.
  • [EXTERNAL_DOWNLOADS]: The skill connects to verification.didit.me and apx.didit.me to perform email verification and account management. These are official endpoints belonging to the vendor, didit-protocol.
  • [CREDENTIALS_UNSAFE]: Authentication is handled via the DIDIT_API_KEY environment variable, which is the recommended method for managing secrets in this environment. No hardcoded credentials were found.
  • [COMMAND_EXECUTION]: The provided Python script scripts/verify_email.py uses the requests library for standard API communication, posing no risk of unauthorized or dangerous command execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 3, 2026, 05:21 AM