openai-docs-skill
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The bash script
scripts/openai-docs-mcp.shexecutescurlandjqcommands to interact with the documentation server. This is a standard and safe implementation for a CLI tool. - [EXTERNAL_DOWNLOADS]: The skill fetches documentation content from
https://developers.openai.com/mcp. This is an official documentation endpoint for a well-known and trusted organization. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: External documentation content is fetched via the
scripts/openai-docs-mcp.shscript (e.g., infetchandsearchsubcommands) and surfaced to the agent. - Boundary markers: No explicit delimiters or boundary instructions are used to separate the external data from the agent's internal instructions.
- Capability inventory: The skill possesses network access via
curland the ability to execute its own CLI wrapper script. - Sanitization: The script uses
jqto parse JSON-RPC responses, which ensures the data is well-formed JSON, but it does not perform semantic sanitization of the markdown documentation content itself.
Audit Metadata