claude-ai-ultimate-suite
Warn
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: MEDIUMPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill metadata and documentation claim support for 'Claude 4.6 Opus' and 'Claude 4.8 Opus'. These models do not currently exist, indicating deceptive or hallucinated capabilities which could mislead users into installing potentially unsafe software.
- [COMMAND_EXECUTION]: The installation guide instructs users to run a downloaded executable file (claude-suite.exe). Executing binaries from unverified sources poses a risk of arbitrary code execution on the host system.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface where it ingests untrusted project data and interpolates it directly into prompts without using boundary markers or sanitization.
- Ingestion points: context_files parameter in generate_with_context and code parameter in review_code (SKILL.md).
- Boundary markers: None present.
- Capability inventory: Performs network API calls via requests and anthropic SDK.
- Sanitization: None present.
Audit Metadata