openai-platform-api-key
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- Credential Management Protocol: The skill is specifically designed to handle sensitive API keys. To mitigate the risk of data exposure, it enforces a protocol that uses encrypted communication for key creation and explicitly prohibits commands that could print secret values, such as
catorgrepon environment files. - Workspace-Restricted File Operations: The skill utilizes a local helper script for secret management. This implementation includes security checks to ensure all file writes are restricted to the project's root directory, preventing unauthorized access or modification of files through symlinks or paths outside the designated workspace.
- Controlled External Integration: The workflow involves a specific platform connector for provisioning credentials. The skill provides clear instructions for the user to connect through official and verified interfaces, maintaining a secure chain of trust for the authentication process.
- Procedural Verification Safeguards: Before performing any sensitive actions, the skill is instructed to perform 'silent' checks to verify the presence of existing credentials and must obtain explicit user confirmation before writing any secrets to disk.
Audit Metadata