openai-assistants
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/check-versions.shperforms local environment diagnostics by executingnpm listto verify that the correct versions of theopenaipackage and other dependencies are installed. This is a benign administrative task. - [EXTERNAL_DOWNLOADS]: The skill references the official
openaiNode.js package (versions 6.15.0 and 6.16.0) and uses standard OpenAI API endpoints for all operations. No unverified third-party scripts or binaries are downloaded. - [PROMPT_INJECTION]: The skill contains extensive system prompts and instructions for configuring AI assistants. These are standard implementation details for the Assistants API and are not designed to bypass security filters or override agent constraints maliciously.
- [DATA_EXFILTRATION]: No unauthorized network operations or hardcoded credentials were detected. Templates demonstrate the secure use of
process.env.OPENAI_API_KEYfor authentication and interact exclusively with official OpenAI infrastructure. - [REMOTE_CODE_EXECUTION]: While the skill documents the use of OpenAI's 'Code Interpreter' tool, the execution occurs within OpenAI's secure, sandboxed environment. The skill's local code does not execute untrusted external scripts.
Audit Metadata