agent-sdk-python
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
claude-agent-sdkPython package and theclaude-codeNPM package, both of which are official tools from Anthropic. - [COMMAND_EXECUTION]: The verification script and the underlying SDK transport execute the
claude-codeCLI using system subprocess calls for agent communication. - [PROMPT_INJECTION]: The skill defines an agent development framework that inherently possesses an indirect prompt injection vulnerability surface.
- Ingestion points: Data enters the agent context through the
promptparameter inquery()andClaudeSDKClientmethods across the provided code examples and scripts. - Boundary markers: The skill documentation (SKILL.md, implementation-guide.md) encourages the use of
system_promptand project context (CLAUDE.md) to establish agent constraints. - Capability inventory: Agents built using this skill are typically granted access to system tools like
Bash,Write, andReadas specified in the metadata. - Sanitization: The skill provides comprehensive defensive examples, including dynamic
can_use_toolcallbacks andPreToolUsehooks (inhook_integration_example.pyandimplementation-guide.md) specifically designed to filter or block malicious operations like 'rm -rf'.
Audit Metadata