openai-platform-api-key
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [Credential Management and Protection]: The skill operates as a secure credential gate for handling
OPENAI_API_KEYand project configurations. It explicitly enforces rules against printing, quoting, or echoing plaintext secret values, and restricts the use of commands that could inadvertently expose secrets during file inspection. - [Local Companion Script Execution]: The workflow leverages a local script (
openai-platform-api-key.mjs) bundled within the plugin directory to perform key preparation and decryption tasks. The script is restricted to the validated workspace root and rejects symlinks or destinations outside that path to maintain local file system boundaries.
Audit Metadata