anth-hello-world
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as an educational resource, providing boilerplate code for the Anthropic Messages API. All referenced resources and documentation links point to the official Anthropic domain.
- [INDIRECT_PROMPT_INJECTION]: The provided code snippets demonstrate how to handle user-supplied prompts and image data. As these are integration examples, the presence of an input surface is expected and necessary for the skill's purpose.
- Ingestion points: The
messagescontent blocks in the Python and TypeScript code examples in SKILL.md. - Boundary markers: The examples follow the official SDK's structured message format, which uses role-based delimiters.
- Capability inventory: Includes local file reading (fs.readFileSync) and network requests to the Anthropic API via official client libraries.
- Sanitization: Standard for introductory examples; input sanitization is managed by the SDK and the implementation logic of the resulting application.
Audit Metadata