Skills/Claude Code plugins/agent-sdk-dev

agent-sdk-dev@r1

CAUTION

Publisher claims: "Development kit for working with the Claude Agent SDK" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Claude Code plugin marketplacePublisher anthropics · joined 4 days agoInstalls 0Last detonated 56 min ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
npx invocation of non-well-known packageREADME.md:163 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagecommands/new-sdk-app.md:164 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathscommands/new-sdk-app.md:99 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsagents/agent-sdk-verifier-py.md:86 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsREADME.md:93 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathscommands/new-sdk-app.md:98 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsREADME.md:161 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsagents/agent-sdk-verifier-ts.md:52 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsagents/agent-sdk-verifier-py.md:47 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageagents/agent-sdk-verifier-ts.md:39 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsREADME.md:139 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsagents/agent-sdk-verifier-py.md:46 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
LOW
Unpinned dependencycommands/new-sdk-app.md:83 · Unpinned dependency
AST06
HIGH
Access to sensitive file pathsagents/agent-sdk-verifier-ts.md:92 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsagents/agent-sdk-verifier-ts.md:53 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packagecommands/new-sdk-app.md:119 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsREADME.md:59 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsREADME.md:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageagents/agent-sdk-verifier-ts.md:103 · npx invocation of non-well-known package — may execute untrusted code
AST06