anthropic

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the official Anthropic SDK via standard package managers (pip install anthropic and npm install @anthropic-ai/sdk). It also links to official GitHub repositories under the 'anthropics' organization and documentation on 'anthropic.com'. All external references are to well-known, trusted sources.
  • [CREDENTIALS_UNSAFE]: The skill demonstrates safe credential handling by advising the use of environment variables (ANTHROPIC_API_KEY) and specifically includes examples showing how to retrieve them via 'os.environ.get' and 'process.env'. It correctly identifies hardcoding API keys as a common pitfall.
  • [COMMAND_EXECUTION]: The shell commands provided in the documentation are restricted to standard package installation and environment variable configuration ('export'). There are no instances of arbitrary or dangerous command execution.
  • [DATA_EXFILTRATION]: Network operations are exclusively directed at official Anthropic API endpoints. There is no evidence of sensitive data being sent to unauthorized third-party domains.
  • [PROMPT_INJECTION]: The skill contains standard operational instructions and does not include any patterns typical of prompt injection, such as instructions to override system prompts or bypass safety filters.
  • [SAFE]: The skill demonstrates secure coding patterns for common tasks including vision model integration, function calling, and web framework integration (FastAPI/Express).
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 10:59 AM
Security Audit — agent-trust-hub — anthropic