Claude SDK Expert

SUSPICIOUS: the skill is mostly a legitimate Anthropic SDK guide, and the destructive-command finding is a documentation false positive. Risk comes from third-party MCP patterns: unpinned npx/docker execution and credential forwarding to external server processes, which are coherent with the skill’s purpose but raise medium security concern.