openai-agents-sdk
Audited by Socket on Mar 7, 2026
1 alert found:
Obfuscated FileThe openai-agents-sdk skill describes a legitimate developer-oriented Python SDK usage for building AI agents with OpenAI Agents. Its footprint—pip-based installation from a standard registry, environment-based API keys, and direct API calls to official OpenAI/Azure endpoints—aligns with its stated purpose. There are no evident malicious data exfiltration patterns, unauthorized credential forwarding to unknown binaries, or supply-chain behaviors. Some areas (privacy details, explicit logging, and guardrails in autonomous workflows) could benefit from clearer documentation, but nothing suggests an intent to misuse credentials or perform covert actions. Overall, the footprint is benign to moderate risk and proportionate to its stated purpose.