openai-platform-api-key
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- Secure Credential Handling: The skill implements a 'credential gate' that requires safe inspection of API keys. It explicitly forbids printing, quoting, or pasting plaintext keys, which mitigates the risk of accidental credential exposure in chat logs.
- Safe Environment Inspection: Instructions specify the use of silent exit-status checks or existence checks for environment files (e.g.,
.env.local). This approach prevents the agent from inadvertently displaying the entire contents of sensitive configuration files when searching for specific variables. - Trusted Resource Reference: The skill directs users to the official OpenAI platform (
platform.openai.com) for manual key setup. This is a recognized service belonging to the vendor, facilitating a secure path for users to obtain credentials without automated retrieval. - Mandatory User Confirmation: A hard-stop mechanism is implemented, requiring the agent to wait for user confirmation (reuse vs. new key) before proceeding with any API-backed implementation. This ensures user oversight and prevents the silent use of detected credentials.
Audit Metadata