openai-apps-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill serves as a reference and SDK guide for developers. It contains no executable scripts or malicious instructions directed at the agent or the user.
- [SAFE]: The documentation includes proactive security and privacy guidance for developers, such as emphasizing least privilege, data collection minimization, and mitigating prompt injection risks.
- [SAFE]: Code samples provided (e.g., in
minimal-mcp-server.mdandcheckout-flow.md) use safe coding practices, such as usingtextContentinstead ofinnerHTMLto prevent XSS, and using placeholders for sensitive identifiers. - [SAFE]: External tools and services mentioned, such as
ngrokand the Model Context Protocol SDKs, are well-known developer utilities. The instructions include appropriate security warnings when using these tools in local environments.
Audit Metadata