chatkit-streaming
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in the documentation or provided code samples.
- [SAFE]: The skill uses the official
@openai/chatkit-reactlibrary and follows documented integration patterns for streaming responses and UI state synchronization. - [SAFE]: Data persistence using
localStorageis limited to non-sensitive thread identifiers (lastThreadId) for session management. - [SAFE]: The 'Client Tools' pattern (
onClientTool) correctly implements a mechanism for the agent to query the application state, which is a standard feature of the ChatKit framework when used with trusted backend configurations.
Audit Metadata