didit-database-validation

Integrates Didit Database Validation API to verify personal data against government databases, preventing identity fraud.

Install this skill

88/100

Security score

The didit-database-validation skill was audited on Mar 6, 2026 and we found 8 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

low line 131

Fetch to external URL

SourceSKILL.md

131	const response = await fetch("https://verification.didit.me/v3/database-validation/", {

medium line 48

Webhook reference - potential data exfiltration

SourceSKILL.md

48	All requests require `x-api-key` header. Get your key from [Didit Business Console](https://business.didit.me) → API & Webhooks, or via programmatic registration (see below).

low line 48

External URL reference

SourceSKILL.md

48	All requests require `x-api-key` header. Get your key from [Didit Business Console](https://business.didit.me) → API & Webhooks, or via programmatic registration (see below).

low line 54

External URL reference

SourceSKILL.md

54	1. Register: `POST https://apx.didit.me/auth/v2/programmatic/register/` with `{"email": "[email protected]", "password": "MyStr0ng!Pass"}`

low line 56

External URL reference

SourceSKILL.md

56	3. Verify: `POST https://apx.didit.me/auth/v2/programmatic/verify-email/` with `{"email": "[email protected]", "code": "A3K9F2"}` → response includes `api_key`

low line 67

External URL reference

SourceSKILL.md