openai-docs
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- External Data Retrieval: The skill retrieves documentation and guidance from official domains including
developers.openai.comandplatform.openai.com. These are established resources provided by the vendor for developer support. - Indirect Prompt Injection Surface: The skill processes data from external documentation pages and possesses capabilities to perform source code edits and execute validation tasks (such as linting and testing). This creates a potential surface where content within the documentation could influence agent actions. This is a common characteristic of documentation-retrieval skills and is mitigated here by the use of trusted official sources.
- Credential Handling: The skill references the use of
openai-platform-api-keyfor operations requiring live API access. It follows a security-conscious approach by ensuring that missing credentials only skip live validation requests while allowing documentation retrieval and offline tasks to proceed.
Audit Metadata