openai-host-compat
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown documentation and JSON data files. There are no scripts (e.g., .py, .js, .sh) or executable components that could perform actions on the host system.
- [DATA_EXFILTRATION]: The documentation contains explicit security constraints for developers, such as 'Do not log prompts or API keys,' which promotes secure handling of sensitive credentials.
- [INDIRECT_PROMPT_INJECTION]: The skill defines rules for processing untrusted JSON payloads from API clients.
- Ingestion points: OpenAI-compatible
POST /v1/chat/completionsrequest bodies. - Boundary markers: Not applicable, as the skill focus is on structural JSON transformations rather than prompt framing.
- Capability inventory: None; the skill does not include any tools or executable code.
- Sanitization: The
sanitize_tool_schemasandsanitize_json_schemashims specifically instruct developers to strip potentially malicious$refkeywords and clamp regular expression patterns to prevent Server-Side Request Forgery (SSRF) and resource exhaustion.
Audit Metadata