openai-api

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the openai package from the official npm registry. While the version number mentioned (6.9.1) is ahead of current releases, it refers to the official library of a well-known service.
  • [CREDENTIALS_UNSAFE]: The documentation includes placeholders for API keys (sk-...) and correctly instructs users to store sensitive credentials in environment variables or .env files, adhering to industry best practices for secret management.
  • [INDIRECT_PROMPT_INJECTION]: As a development guide for LLM integration, the skill describes how to handle user-supplied data in API requests. This represents a standard architectural surface for applications, and the skill includes documentation for the Moderation API to help mitigate content-related risks.
  • [COMMAND_EXECUTION]: The skill includes standard commands for package installation and environment configuration, which are expected for a development-oriented resource.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 12:31 PM