chatgpt-app-builder
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional and does not contain any malicious patterns such as prompt injection, obfuscation, or persistence mechanisms.
- [COMMAND_EXECUTION]: The documentation includes standard development and maintenance commands such as
npm install,npm run dev, and project scaffolding vianpm create. These are intended for developer use within the framework's ecosystem. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of project templates and deployment tools through verified package registries (npm) and official vendor CLI tools (
npx alpic@latest). These resources originate from the vendor and are used to set up the development environment. - [DATA_EXPOSURE]: No hardcoded credentials or sensitive data were found. The skill follows secure practices by advising users to store secrets in
.envfiles and providing guidance on implementing robust OAuth authentication and Content Security Policies (CSP).
Audit Metadata