chatgpt-apps
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- Project Scaffolding Utility: The skill includes a Node.js script (
scripts/scaffold_node_ext_apps.mjs) that automates the creation of a project structure. It writes configuration files, a server implementation, and a widget template to a local directory specified by the user. These file system operations are standard for a scaffolding tool and are performed within the context of project setup. - Integration with Trusted Documentation: The skill is designed to work in tandem with official OpenAI developer documentation. It provides structured guidance on querying and fetching current SDK patterns, ensuring that the generated code aligns with official security and implementation standards.
- Standard Developer Workflow: The instructions describe common development practices, such as using HTTPS tunnels (e.g., ngrok) to test local servers with remote services. This is a standard approach for developing and debugging MCP servers and ChatGPT integrations.
- Use of Official Libraries: The scaffolding templates and documentation references utilize official
@modelcontextprotocolpackages and well-known industry libraries like Zod and TypeScript. These dependencies are appropriate for the skill's intended use case.
Audit Metadata