openai-agents
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for building AI agents that ingest untrusted user input and external tool outputs, which constitutes a surface for indirect prompt injection.
- Ingestion points: Request body processing in
templates/nextjs/api-agent-route.ts,templates/cloudflare-workers/worker-text-agent.ts, andtemplates/cloudflare-workers/worker-agent-hono.ts. - Boundary markers: The skill includes a dedicated template for implementing an
Input Validatoragent intemplates/text-agents/agent-guardrails-input.tsto detect and block injection attempts. - Capability inventory: The agents are designed to perform network operations via the OpenAI API and execute user-defined tools, such as the weather and search tools shown in
templates/text-agents/agent-basic.ts. - Sanitization: The skill demonstrates the use of
InputGuardrailandOutputGuardrailcomponents to validate, filter, and sanitize content, which is a recommended mitigation strategy. - [EXTERNAL_DOWNLOADS]: The skill references legitimate, well-known libraries and SDKs.
- Dependencies:
SKILL.mdandtemplates/shared/package.jsonrecommend installing@openai/agents,@openai/agents-realtime, andzodvia npm. These are official packages from a trusted organization.
Audit Metadata