Anthropic SDK Security Scan

Defensive scan for applications built on the Anthropic SDK. Targets the boundaries where untrusted data enters or leaves the model. Reports findings using the shared scoring schema.

Scope

• Files importing anthropic (Python) or @anthropic-ai/sdk (Node)
• Calls to messages.create, messages.stream, beta.messages.*, tools.*
• System-prompt strings, tool definitions, tool execution code

Out of scope: model selection / cost (covered by cost-aware-llm-pipeline), upstream content moderation policy.

Procedure

1. Find every callsite of client.messages.create (and streaming variants).
2. Trace the system, messages, and tools parameters back to their data sources.
3. Find every tool execution handler (the code that runs when stop_reason === "tool_use").
4. Apply rules below.