clade-reliability-patterns
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill demonstrates code patterns that interpolate untrusted external data directly into model prompts without using boundary markers or sanitization logic.
- Ingestion points: The
userInputparameter in thegetResponsefunction located inSKILL.mdis passed directly into the message content array. - Boundary markers: The template lacks delimiters (like XML tags or triple quotes) or specific instructions to help the model distinguish between developer instructions and user-provided content.
- Capability inventory: The scripts demonstrate usage of the Anthropic SDK
messages.createmethod to perform network requests to an LLM provider. - Sanitization: The provided code does not include escaping or validation logic to mitigate malicious content within the
userInputvariable.
Audit Metadata