chatkit-frontend

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a legitimate implementation guide for OpenAI's ChatKit UI framework. All referenced resources, including documentation and repositories, point to official OpenAI domains.
  • [EXTERNAL_DOWNLOADS]: The instructions include installing the @openai/chatkit-react package from the official NPM registry. This is a well-known package from a trusted organization.
  • [DATA_EXPOSURE]: The skill promotes secure credential management by instructing users to store API keys and domain keys in .env.local files, rather than hardcoding them in the source code.
  • [INDIRECT_PROMPT_INJECTION]: As a chat interface component, the skill inherently processes external data (chat messages and tool results). It provides examples of handling client-side tools like navigation and clipboard access, which are standard features for AI-integrated UIs and do not present a security risk in this context.
  • [COMMAND_EXECUTION]: The skill uses basic shell commands (npm install, grep) to manage and verify the project's frontend dependencies, which is expected behavior for a frontend development skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 07:36 PM