精选85Claude Agent SDK Python（GitHub Releases）AI 编程与模型
Claude Agent SDK v0.2.129：技能名校验与安全修复
v0.2.129
推荐理由
使用 Claude Agent SDK 的开发者注意：v0.2.129 收紧了技能名校验，含通配符或特殊字符的旧写法会直接报错，且修复了可注入 --allowedTools 权限规则的安全漏洞，建议尽快升级并调整技能配置。
Breaking Changes
- Skill name validation in ClaudeAgentOptions.skills: Skill names containing parentheses, commas, control characters, wildcards (*, :*), leading /, surrounding whitespace, or surrogate code points now raise ValueError at connect time. skills=["plugin:*"] and skills=["*"] should be replaced with skills="all" or a Skill(...) rule in allowed_tools. Names with leading whitespace or / previously built rules that could never match (silently disabling the skill) and now raise explicitly (#1145)
Bug Fixes
- Validated skill names to prevent --allowedTools injection: Skill names from ClaudeAgentOptions(skills=[...]) were passed unchecked into the CLI's --allowedTools value, which splits on commas and spaces. A crafted name could inject extra permission rules. The transport now validates each name and rejects delimiter-carrying or malformed values (#1145)
Internal/Other Changes
- Updated bundled Claude CLI to version 2.1.221
PyPI: https://pypi.org/project/claude-agent-sdk/0.2.129/
pip install claude-agent-sdk==0.2.129更进一步：量化金融体系
看懂新闻只是起点——沿量化金融路径，把它变成能交付的工程能力