claude-api
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official SDKs from standard registries, such as 'anthropic' for Python (via pip) and '@anthropic-ai/sdk' for Node.js (via npm). These are well-known, official packages for interacting with the Claude API.
- [CREDENTIALS_UNSAFE]: The skill correctly advises against hardcoding API keys and provides examples of using environment variables (e.g., 'ANTHROPIC_API_KEY') for authentication, which is a security best practice.
- [COMMAND_EXECUTION]: Code snippets include standard package installation commands and basic file reading (e.g., reading an image for vision tasks). These operations are routine for the documented use case and do not involve unauthorized or dangerous system modifications.
- [DATA_EXFILTRATION]: Network operations are limited to communicating with the official Anthropic API endpoints through the authorized SDKs as part of the intended functionality.
Audit Metadata