aod-sdk-python
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the aod-sdk package using pip install aod-sdk. This package is the official Python SDK for the Agent on Demand service and is sourced from the vendor's own repository infrastructure.
- [PROMPT_INJECTION]: The skill documentation describes how to ingest and process untrusted data from an AI agent's real-time output stream, which presents a surface for indirect prompt injection.
- Ingestion points: Data is received through the client.sessions.stream method in SKILL.md, specifically within the StreamEvent.extra['data'] field.
- Boundary markers: The provided code examples in SKILL.md do not include boundary markers or specific instructions to ignore embedded commands within the streamed data.
- Capability inventory: The SDK provides extensive capabilities for managing the agent's lifecycle, including creating and updating agents, environments, and sessions (as detailed in SKILL.md).
- Sanitization: No sanitization or filtering logic is demonstrated in the examples before processing the output event data, although the skill mentions runtime-scoped formatters in the aod.pretty namespace.
Audit Metadata