claude-api
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate technical guide for Anthropic's official API and SDKs. All code examples and instructions align with documented platform features.
- [EXTERNAL_DOWNLOADS]: Installation instructions point to official and well-known package registries (npm, PyPI, Composer, RubyGems) for the official Anthropic SDKs. These are trusted sources.
- [DATA_EXPOSURE]: Documentation examples correctly handle sensitive information by using environment variables or clear placeholders (e.g., "your-api-key", "ghp_..."). It explicitly warns against embedding API keys in system prompts or user messages.
- [COMMAND_EXECUTION]: While the skill mentions the 'bash' tool and 'code execution' features, these are discussed as controlled capabilities of the API being documented, not as actions the skill itself performs on the host system. The skill includes security advice like using path sanitization for downloaded files.
- [OBFUSCATION]: Analysis of the skill's content, including code snippets and metadata, revealed no hidden or obfuscated content. Base64 strings found in examples are legitimate placeholders for image data.
- [PROMPT_INJECTION]: The skill's instructions focus on providing technical guidance to the agent and do not contain patterns designed to bypass safety filters or override system behavior maliciously.
Audit Metadata