claude-api
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of Markdown documentation and code examples intended to assist developers with Claude API integration. No malicious scripts or patterns were identified.
- [EXTERNAL_DOWNLOADS]: The documentation includes standard installation instructions for official SDKs via well-known package managers (npm, pip, Maven, composer, gem). It also references official documentation domains (platform.claude.com) and GitHub repositories (github.com/anthropics). These references target trusted organizations and well-known services.
- [PRIVILEGE_ESCALATION]: The installation guide for the Anthropic CLI in 'shared/anthropic-cli.md' includes a sudo command to move the 'ant' binary to '/usr/local/bin'. This is a common and appropriate installation pattern for system-wide CLI tools and is consistent with the skill's primary purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by instructing the agent to process external data.
- Ingestion points: Project file scanning (described in 'SKILL.md') and WebFetch of documentation URLs (listed in 'shared/live-sources.md').
- Boundary markers: Absent for the ingested content.
- Capability inventory: Use of the 'WebFetch' tool as instructed in 'SKILL.md'.
- Sanitization: No explicit sanitization of external content is described.
Audit Metadata