gitbook-openapi

Pass

Audited by Gen Agent Trust Hub on Jun 29, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes examples using the official @gitbook/cli package from the vendor's repository. This is used for automating the publishing of API documentation and is a standard development practice.
  • [COMMAND_EXECUTION]: Technical instructions include the use of the gitbook openapi publish CLI tool. This command is the primary method for synchronizing local OpenAPI specifications with GitBook's services.
  • [CREDENTIALS_UNSAFE]: The skill mentions the requirement of a GITBOOK_TOKEN for authentication. It appropriately recommends storing this sensitive value as a secret within environment variables or CI/CD pipelines (e.g., GitHub Secrets), which aligns with secure secret management protocols.
  • [SAFE]: The skill facilitates communication with official GitBook domains for documentation and configuration. The use of custom OpenAPI extensions (x-*) is a standard method for platform-specific rendering and does not introduce security vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 29, 2026, 04:24 PM
Security Audit — agent-trust-hub — gitbook-openapi