skills/openai/plugins/agents-sdk/Gen Agent Trust Hub

agents-sdk

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [Secure Credential Handling]: The skill integrates a dedicated 'credential gate' mechanism for managing OPENAI_API_KEY. It explicitly instructs the agent to follow a confirmation flow and prohibits printing or committing secret values to the project, which is a standard security best practice.
  • [Trusted External Resources]: The workflow involves cloning the 'openai-cookbook' repository and referencing official documentation from established domains. These resources originate from the vendor's own verified infrastructure and are used to provide the necessary tools and guidance for the build process.
  • [Development Command Execution]: The skill utilizes command-line tools such as uv, make, and curl to manage dependencies, deploy services, and perform health checks. These operations are limited to the local environment (e.g., 127.0.0.1) and are typical for professional software development and deployment managers.
  • [Sandboxed Execution Patterns]: For tasks requiring file system or shell access, the skill recommends using SandboxAgent. This design pattern encourages isolating potentially sensitive workspace operations from the core business logic of the application.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 11:30 PM