claude-cookbooks

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The contribution guide in references/CONTRIBUTING.md provides a standard installation command for the uv package manager using curl piped to a shell. The script is hosted at https://astral.sh/uv/install.sh, which is the official distribution point for the well-known Astral ecosystem tool.
  • [EXTERNAL_DOWNLOADS]: The skill documentation describes the installation of several well-known Python packages for development and testing, including anthropic, ruff, pre-commit, jupyter, and nbconvert via official package registries.
  • [COMMAND_EXECUTION]: The skill includes documentation for using standard CLI tools such as git for repository management, gh for GitHub interactions, and package managers like pip and uv for environment setup.
  • [INDIRECT_PROMPT_INJECTION]: The scripts/memory_tool.py utility allows an agent to read, write, and manage files in a local storage directory. This capability presents a surface where external or untrusted data processed by the agent could be stored and subsequently re-read into the agent's context. The implementation mitigates this risk by enforcing strict path validation using pathlib to prevent directory traversal and restricting file operations to a specific /memories directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 11:23 PM