gitbook-openapi
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes examples using the official
@gitbook/clipackage from the vendor's repository. This is used for automating the publishing of API documentation and is a standard development practice. - [COMMAND_EXECUTION]: Technical instructions include the use of the
gitbook openapi publishCLI tool. This command is the primary method for synchronizing local OpenAPI specifications with GitBook's services. - [CREDENTIALS_UNSAFE]: The skill mentions the requirement of a
GITBOOK_TOKENfor authentication. It appropriately recommends storing this sensitive value as a secret within environment variables or CI/CD pipelines (e.g., GitHub Secrets), which aligns with secure secret management protocols. - [SAFE]: The skill facilitates communication with official GitBook domains for documentation and configuration. The use of custom OpenAPI extensions (
x-*) is a standard method for platform-specific rendering and does not introduce security vulnerabilities.
Audit Metadata