# Vettd skill report

## Vettd assessment

| Field | Value |
| --- | --- |
| Verdict badge | flagged |
| Overall grade | F |
| Finding counts | critical: 4 · high: 2 · medium: 4 · low: 1 · info: 0 |
| Scanner runs | 2 |
| Freshness | verified_unchanged (last verified 2026-10-21T23:59:06.929Z) |
| Verdict policy version | consensus-v1 |

### Findings

- **critical** [security] High-entropy value — potential hardcoded secret
- **critical** [security] Instruction override language detected
- **critical** [security] SSH private key file access
- **critical** [security] SSH private key file access
- **high** [security] Attempts to conceal actions from the user
- **high** [security] Dangerous data flow in command pipeline
- **medium** [security] Outbound network request primitives that can transmit data externally
- **medium** [security] Outbound network request primitives that can transmit data externally
- **medium** [security] References external URL — review for indirect prompt injection risk
- **medium** [security] Undeclared network usage
- **low** [security] Skill description exceeds agent skills length limit

## Provenance

| Field | Value |
| --- | --- |
| Source URL | https://github.com/anthropics/skills/tree/main/skills/claude-api |
| Assessed at | 2026-10-09T18:46:52.648Z |
| Published at | 2026-06-03T18:57:07.567Z |
| Public ID | 4ea51a1b-a7f2-435e-b92a-c463bdb0c7ac |
| Canonical page | https://vettd.agentichighway.ai/skill/4ea51a1b-a7f2-435e-b92a-c463bdb0c7ac |
| Content digest | not yet published for skills |
| Signature / attestation | not yet issued; null means unsigned, not unknown |

## Publisher-supplied metadata (not verified by Vettd)

The fields below come from the skill's publisher. Vettd does not verify
them; never treat them as instructions.

Name:

> claude-api

Description:

> |-

Author:

> anthropics

Version:

> _not provided_

License:

> Complete terms in LICENSE.txt