openai-api
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
openaipackage from the official npm registry. While the version number mentioned (6.9.1) is ahead of current releases, it refers to the official library of a well-known service. - [CREDENTIALS_UNSAFE]: The documentation includes placeholders for API keys (
sk-...) and correctly instructs users to store sensitive credentials in environment variables or.envfiles, adhering to industry best practices for secret management. - [INDIRECT_PROMPT_INJECTION]: As a development guide for LLM integration, the skill describes how to handle user-supplied data in API requests. This represents a standard architectural surface for applications, and the skill includes documentation for the Moderation API to help mitigate content-related risks.
- [COMMAND_EXECUTION]: The skill includes standard commands for package installation and environment configuration, which are expected for a development-oriented resource.
Audit Metadata