openai-assistants

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate technical documentation and code examples for OpenAI's Assistants API. All code samples follow standard security practices for API integration.
  • [COMMAND_EXECUTION]: The script scripts/check-versions.sh performs local version checks of the openai package using npm list. This is a benign administrative task.
  • [EXTERNAL_DOWNLOADS]: Templates reference the official openai SDK from the public NPM registry. All external URLs point to official OpenAI documentation domains.
  • [DATA_EXFILTRATION]: Security best practices are followed for API key management, utilizing environment variables instead of hardcoded strings. No unauthorized data transmission was observed.
  • [SAFE]: The documentation identifies and provides mitigations for common vulnerabilities such as race conditions in thread management and data consistency issues in vector store indexing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 01:36 AM
Security Audit — agent-trust-hub — openai-assistants