clade-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to fetch status and incident data from official Anthropic domains (status.anthropic.com). These resources originate from a recognized trusted organization and are used for legitimate diagnostic purposes.
- [COMMAND_EXECUTION]: The skill utilizes common developer tools such as
curl,grep, andpython3to interact with APIs and process JSON responses. The commands are scoped to diagnostic tasks, such as verifying API connectivity and parsing status payloads. - [REMOTE_CODE_EXECUTION]: Analysis of the patterns flagged by automated scanners indicates that
curloutput is piped topython3for the sole purpose of JSON formatting and basic parsing. The code executed by Python is either a standard library module (json.tool) or a short, static script embedded within the skill. Since the data source is a trusted organization and the execution logic is fixed within the skill body, this does not represent a malicious remote code execution vector.
Audit Metadata