anthropic-sdk-pro

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Anthropic SDK Pro skill appears aligned with its stated purpose: it demonstrates typical usage of the Anthropic API (including streaming) within a Next.js-like context, with tool-use and error handling guidance. The footprint is mostly dependencies and API calls to official endpoints, with environment-based API key usage. The primary security considerations are standard: ensure secure handling of ANTHROPIC_API_KEY, sanitize prompts to avoid leaking sensitive information, and implement appropriate logging/privacy practices. No evidence of dangerous download/executable patterns or credential forwarding to unknown third parties. Overall, the skill is BENIGN with MEDIUM risk due to credential handling and data privacy considerations.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 01:22 AM
Package URL
pkg:socket/skills-sh/clownnvd%2Fclaude-code-skills%2Fanthropic-sdk-pro%2F@d6b5ad319e766aec7b40356ec01cf599c62d947b