anth-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the official Anthropic SDK via standard package managers (pip and npm). These downloads target well-known repositories maintained by a trusted organization.
- [COMMAND_EXECUTION]: It employs routine shell commands for dependency management and version verification. A short Python snippet is used to confirm the functionality of the upgraded SDK in a local environment.
- [INDIRECT_PROMPT_INJECTION]: While the skill interacts with API response data, it includes comprehensive instructions to mitigate risks. It mandates the use of synthetic fixtures, isolated canary environments, and the redaction of sensitive data from all logs and receipts.
- Ingestion points: API response content and test execution results.
- Boundary markers: Explicit requirements to use isolated workspaces and synthetic prompt fixtures.
- Capability inventory: File system modifications and shell command execution for package updates and verification.
- Sanitization: Directives to redact usage receipts, exclude API keys, and strictly avoid logging prompt or response text.
Audit Metadata