ai-provider-anthropic-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or unauthorized network operations were detected in the skill instructions or code examples.
- [CREDENTIALS_UNSAFE]: The skill demonstrates secure practices by instructing users to utilize environment variables (
process.env.ANTHROPIC_API_KEY) for API keys and explicitly warns against the high-priority risk of hardcoding credentials. - [EXTERNAL_DOWNLOADS]: The skill references standard, well-known Node.js packages (
@anthropic-ai/sdk,zod) from established registries. - [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for handling untrusted data (such as image analysis, document summarization, and tool outputs). It promotes security by requiring developers to iterate over typed content blocks and explicitly handle
stop_reasonmetadata, which helps prevent malformed responses from causing application logic errors.
Audit Metadata