Security checks across malware telemetry and agentic risk
This is a disclosed Didit administration skill, but it can change or delete sensitive identity-verification data and prints powerful credentials to terminal output.
Install only if you intend to let an agent administer a Didit account. Use a least-privilege or test key when possible, require explicit human approval before delete_all, user/session deletion, status overrides, billing, webhook, or blocklist actions, and avoid running setup/login commands in logged or shared terminals unless you are prepared to rotate any exposed keys or tokens.
elif args.command == "login":
result = login(args.email, args.password)
print(json.dumps(result, indent=2))
print(f"\n--- Login successful. Access token expires in {result.get('expires_in', '?')}s ---")
if __name__ == "__main__":66/66 vendors flagged this skill as clean.