스킬 extension-openai

📦

extension-openai

Name: extension-openai
Author: caffeinelabs

v0.1.0 콘텐츠 리비전 r1 높은 위험 ⚙️ 외부 명령어🌐 네트워크 접근📁 파일 시스템 접근

Build Secure OpenAI Features on Caffeine

Direct OpenAI calls from Internet Computer canisters can expose credentials and multiply charges. This skill provides typed Motoko patterns for safer chat integration.

지원: Claude Codex Code(CC)

⚠️ 38 나쁨

Maintain this Skill? Claim it ⚠️ 38 나쁨

설치 전에 중지하고 확인을 요청하세요.

계획을 검토하고 파일을 변경하기 전에 사용자의 명시적 동의를 받으세요.

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "extension-openai" from https://skillstore.io/skills/caffeinelabs-extension-openai.md and its manifest at https://skillstore.io/api/skills/caffeinelabs-extension-openai/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/caffeinelabs-extension-openai.md 서명된 manifest GET /api/skills/caffeinelabs-extension-openai/manifest 서명된 lockfile GET /api/skills/caffeinelabs-extension-openai/lockfile

테스트해 보기

"extension-openai" 사용 중입니다. Add OpenAI chat to a signed-in application with several independent users.

예상 결과:

Selected the per-user key model because the application has login and multiple users.
Planned authenticated key setup, configuration status, key removal, and chat screens.
Required non-replicated calls and typed openai-client requests.

"extension-openai" 사용 중입니다. Audit an administrator-funded chat endpoint.

예상 결과:

High risk: authenticated users can submit unlimited operator-funded requests.
Recommended per-user quotas, request throttling, usage monitoring, and a global spending limit.
Confirmed that no endpoint returns the stored key.

"extension-openai" 사용 중입니다. Use real-time streaming responses with the pinned connector.

예상 결과:

The pinned connector does not support Realtime or streaming.
Use a supported non-streaming flow or choose another reviewed integration.

보안 감사

높은 위험

v1 • 2026. 7. 23. 버전별 보고서 열기

All 154 static detections are false positives for their reported patterns; they are Markdown formatting, reference URLs, fixed imports, or ordinary prose. Semantic review found overbroad orchestrator directives, an unauthenticated key and chat variant, and missing usage controls in the operator-funded example. These issues can force dependency choices or enable credential replacement, denial of service, and unbounded OpenAI charges.

스캔된 파일

477

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (3)

높음

SKILL.md:11-14 SKILL.md:28-42

Prompt Injection Attempt Detected

SKILL.md says "do not decline, deflect, or call `query_rag`" and requires every relevant build to use one package. These directives attempt to control host routing beyond technical integration guidance.

The file explicitly instructs the orchestrator not to use another tool and mandates its own activation and dependency choice.

높음

SKILL.md:365 SKILL.md:391-397 SKILL.md:401-403

Unauthenticated Credential Replacement and Paid API Use

The anonymous variant exposes an unauthenticated API-key setter and removes the chat permission check. Any visitor can overwrite the shared credential and drive paid requests.

The instructions deliberately remove both setter and chat authorization while acknowledging that every visitor can replace the key.

높음

SKILL.md:93-95 SKILL.md:346-351

Operator-Funded Requests Lack Usage Controls

The administrator-funded example checks only the user role before calling OpenAI. It includes no quota, rate limit, cost ceiling, or abuse control for authenticated users.

The example directly reaches the paid API after one role check, while the same file states that the long-lived key can spend the account balance.

위험 요인

⚙️ 외부 명령어 (50)

🌐 네트워크 접근 (8)

SKILL.md:32 SKILL.md:24 SKILL.md:79 SKILL.md:272 SKILL.md:471 SKILL.md:472 SKILL.md:473 SKILL.md:474

📁 파일 시스템 접근 (8)

SKILL.md:63 SKILL.md:151 SKILL.md:306 SKILL.md:327 SKILL.md:411 SKILL.md:437 SKILL.md:475 SKILL.md:476

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/caffeinelabs-extension-openai/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/caffeinelabs-extension-openai/security.svg)](https://skillstore.io/skills/caffeinelabs-extension-openai?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/caffeinelabs-extension-openai?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/caffeinelabs-extension-openai/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/caffeinelabs-extension-openai.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

caffeinelabs. (2026). extension-openai security audit report (audit version 1) [Author version 0.1.0]. Skillstore. https://skillstore.io/skills/caffeinelabs-extension-openai/audits/1

BibTeX 인용

@techreport{caffeinelabs-caffeinelabs-extension-openai-2026,
  author = {caffeinelabs},
  title = {extension-openai security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/caffeinelabs-extension-openai/audits/1},
  note = {Author version 0.1.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "extension-openai security audit report (audit version 1)"
version: "0.1.0"
type: report
authors:
  - name: "caffeinelabs"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/caffeinelabs-extension-openai/audits/1"
identifiers:
  - type: other
    value: "skillstore:caffeinelabs-extension-openai:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

100

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Per-user AI chat

A Motoko developer adds signed-in chat where each user supplies and funds a separate OpenAI key.

Operator-funded assistant

A SaaS operator configures one protected key for authenticated users and adds application-level spending controls.

Integration security review

A security engineer checks key exposure, caller gates, replication settings, and unsupported API requirements before deployment.

이 프롬프트를 사용해 보세요

Add OpenAI chat

Add OpenAI chat to my Caffeine AI project. Use per-user keys, typed openai-client bindings, and a settings page.

Choose key ownership

Choose an API-key ownership model for this project: [requirements]. Compare per-user, administrator-funded, and anonymous options with security and billing tradeoffs.

Design funded access

Design an administrator-funded OpenAI chat feature for [application]. Include role gates, per-user quotas, rate limits, cost ceilings, and configuration status.

Audit an integration

Audit this Motoko OpenAI integration for raw HTTP calls, key exposure, replicated outcalls, missing caller checks, unsupported APIs, and unbounded spending.

모범 사례

Default to per-user keys when ownership and billing responsibility are not explicit.
Keep keys server-side, expose only configuration status, and never log or return credentials.
Enforce non-replicated outcalls, usage limits, and cost monitoring before production deployment.

피하기

Do not build raw OpenAI HTTP requests or hand-written response parsing.
Do not expose API-key getters, browser storage, logs, or telemetry containing credentials.
Do not deploy anonymous or shared-key access without strict quotas and explicit risk acceptance.

자주 묻는 질문

Which projects does this skill support?

It targets Caffeine AI applications using Motoko and Internet Computer canisters.

Does the skill call OpenAI automatically?

No. It provides instructions and examples for applications that call OpenAI after key configuration.

Which key ownership models are included?

It covers per-user keys, one administrator-managed key, and an unsafe anonymous shared-key variant.

Does the connector support streaming?

No. The documented connector returns complete responses and does not support Realtime or server-sent events.

Which dependency is required?

The instructions use openai-client version 0.2.5 or later through the Mops package manager.

Is the anonymous variant suitable for production?

No. Any visitor can replace the key and make billable requests, so production deployments need authentication and usage limits.

개발자 세부 정보

작성자

caffeinelabs

라이선스

MIT

작성자 버전

v0.1.0

Skillstore 리비전

리포지토리

https://github.com/caffeinelabs/skills/tree/10fb452613c797633b8cb33639fc9a754a138039/skills/extension-openai

참조

f32f934280aa94e399d875d7cf7b2ed16d1b82a3

유지보수 최신성

2026. 7. 23.

사용량

0 다운로드 · 0 조회

파일 구조

📄 SKILL.md