chatkit-frontend
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate implementation guide for OpenAI's ChatKit UI framework. All referenced resources, including documentation and repositories, point to official OpenAI domains.
- [EXTERNAL_DOWNLOADS]: The instructions include installing the
@openai/chatkit-reactpackage from the official NPM registry. This is a well-known package from a trusted organization. - [DATA_EXPOSURE]: The skill promotes secure credential management by instructing users to store API keys and domain keys in
.env.localfiles, rather than hardcoding them in the source code. - [INDIRECT_PROMPT_INJECTION]: As a chat interface component, the skill inherently processes external data (chat messages and tool results). It provides examples of handling client-side tools like navigation and clipboard access, which are standard features for AI-integrated UIs and do not present a security risk in this context.
- [COMMAND_EXECUTION]: The skill uses basic shell commands (npm install, grep) to manage and verify the project's frontend dependencies, which is expected behavior for a frontend development skill.
Audit Metadata