new-sdk-app
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run standard development commands such as
npm init,npm install, andpip installto set up a project environment. These are expected behaviors for a project initialization tool. - [DATA_EXPOSURE]: The skill correctly implements security best practices by instructing the agent to create a
.env.examplewith placeholders and specifically directs that the actual.envfile containing secrets should be added to.gitignoreto prevent accidental credential leakage. - [EXTERNAL_DOWNLOADS]: The skill references and downloads official packages from well-known and trusted registries, including npm (for
@anthropic-ai/claude-agent-sdk) and PyPI (forclaude-agent-sdk). It also uses standard documentation fromdocs.agents.comandconsole.anthropic.com.
Audit Metadata