python-sdk
Pass
Audited by Gen Agent Trust Hub on Nov 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and integration guides for the
inferenceshPython SDK. - [EXTERNAL_DOWNLOADS]: Instructions for installing the
inferenceshpackage viapipand related CLI tools vianpxare standard for this SDK. - [COMMAND_EXECUTION]: Provides examples of tool handlers, including a calculator using
eval()and internal code execution capabilities, which are documented as features for developers. - [CREDENTIALS_UNSAFE]: Encourages using environment variables for API keys, which is a secure alternative to hardcoding secrets.
- [INDIRECT_PROMPT_INJECTION]: Documents patterns for building agents that ingest user input, specifically highlighting safety mitigations.
- Ingestion points:
agent.send_messageandclient.runinputs. - Boundary markers: None mentioned in basic examples.
- Capability inventory: SDK provides tool execution, webhooks, and code execution.
- Sanitization: Recommends human-in-the-loop approval workflows for sensitive operations.
Audit Metadata