claude-api
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of official libraries
anthropic(Python) and@anthropic-ai/sdk(TypeScript). These are established packages from a well-known service provider used for legitimate API integration. - [CREDENTIALS_UNSAFE]: The skill explicitly advises against hardcoding API keys and provides instructions for using environment variables (e.g.,
ANTHROPIC_API_KEY). This aligns with industry security best practices. - [DATA_EXFILTRATION]: While the skill demonstrates how to send data (including images via the Vision API) to Anthropic's servers, this is the core intended functionality of an API integration tool. No unauthorized or suspicious network destinations were identified.
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing external data such as tool outputs and images. It utilizes standard API message structures and roles to maintain context boundaries. As an educational resource, it demonstrates typical integration patterns without introducing specific vulnerabilities.
Audit Metadata