gitbook-openapi
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of the
gitbook openapi publishCLI tool for synchronizing specifications, which is a standard administrative task for the platform. - [EXTERNAL_DOWNLOADS]: Automation examples use
npxto download and execute the@gitbook/clipackage. This package is an official resource provided by the vendor (gitbookio) for specification publishing. - [CREDENTIALS_UNSAFE]: The skill references the requirement of a
GITBOOK_TOKENfor authentication but correctly instructs users to handle this sensitive value through environment variables or secure CI/CD secrets (e.g., GitHub Secrets), adhering to security best practices.
Audit Metadata