ai-provider-openai-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill follows best practices for secret management by recommending environment variables for API keys and provides robust error handling patterns using specific SDK error classes. Dependencies (openai, zod) are well-known official packages. Code examples for file operations and network requests are standard for the documented use cases (image processing, audio transcription, and API communication).
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for ingesting untrusted data (user messages, external article text, audio files) which could contain malicious instructions.
- Ingestion points: SKILL.md (chat messages, Responses API input), examples/chat.md (userMessage), examples/structured-output.md (articleText), examples/tools.md (user queries triggering tool calls).
- Boundary markers: The skill repeatedly highlights and demonstrates the use of the 'developer' role for instructions, which serves as a boundary between instructions and untrusted data.
- Capability inventory: The skill demonstrates network access (OpenAI API), file system access (readFileSync/writeFileSync in examples), and tool execution (web search, file search via Responses API).
- Sanitization: Not explicitly implemented in the example code, relying on the model's internal safety filters and the SDK's schema validation features.
Audit Metadata