openai-assistants

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/check-versions.sh performs local environment diagnostics by executing npm list to verify that the correct versions of the openai package and other dependencies are installed. This is a benign administrative task.
  • [EXTERNAL_DOWNLOADS]: The skill references the official openai Node.js package (versions 6.15.0 and 6.16.0) and uses standard OpenAI API endpoints for all operations. No unverified third-party scripts or binaries are downloaded.
  • [PROMPT_INJECTION]: The skill contains extensive system prompts and instructions for configuring AI assistants. These are standard implementation details for the Assistants API and are not designed to bypass security filters or override agent constraints maliciously.
  • [DATA_EXFILTRATION]: No unauthorized network operations or hardcoded credentials were detected. Templates demonstrate the secure use of process.env.OPENAI_API_KEY for authentication and interact exclusively with official OpenAI infrastructure.
  • [REMOTE_CODE_EXECUTION]: While the skill documents the use of OpenAI's 'Code Interpreter' tool, the execution occurs within OpenAI's secure, sandboxed environment. The skill's local code does not execute untrusted external scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 03:49 AM