claude-api
Warn
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The script
tests/conversation_examples_test.pyuses theexec()andcompile()functions to dynamically execute Python code snippets that are extracted from the skill's markdown documentation files using regular expressions. This allows for the runtime execution of code derived from local file content. - [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for building agents that ingest untrusted data from external sources such as web searches and tool outputs. This ingestion point creates an attack surface for indirect prompt injection.
- Ingestion points: The skill documents the use of
WebSearchandWebFetchtools (python/agent-sdk/README.md) and the handling oftool_resultblocks (python/claude-api/tool-use.md). - Boundary markers: The documentation recommends using structured outputs (
output_config.format) and strict tool schemas (strict: true) to constrain model responses. - Capability inventory: The Agent SDK documentation describes powerful tools including
Bash,Write, andEditthat can be utilized by the agent. - Sanitization: The skill includes explicit guidance to validate all schemas and paths, and to treat all external data as untrusted input before taking any action.
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install official Anthropic SDKs and libraries (e.g.,
anthropic,claude-agent-sdk,@anthropic-ai/sdk) from trusted registries such as PyPI and npm. These are references to a trusted organization and well-known services.
Audit Metadata