claude-authenticity
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate utility for auditing API authenticity and does not exhibit malicious patterns.
- [EXTERNAL_DOWNLOADS]: The script requires the installation of the standard 'httpx' library from the official Python Package Index (PyPI). This is a well-known and trusted library for making HTTP requests.
- [PROMPT_INJECTION]: The skill includes several prompt templates designed to probe the target model's identity and extract its system prompt. These are intentional diagnostic payloads described in the skill's documentation for the purpose of verifying the transparency of the API provider.
- [DATA_EXPOSURE]: The Python script is designed to take an API key and a target endpoint from the user to perform its checks. This data is transmitted to the specified endpoint to verify its authenticity, which is the stated purpose of the tool. The example code uses a safe placeholder ('sk-xxx') for the API key.
- [COMMAND_EXECUTION]: The skill instructions include standard 'pip' and 'python' commands for installation and execution of the provided script, which is normal for a developer-oriented tool.
Audit Metadata