# Build ChatGPT Apps with Skybridge

Building a ChatGPT app requires coordinated MCP tools, React views, authentication, testing, and deployment. This skill guides the complete Skybridge workflow from discovery through publishing.

## Install

```bash
npx skillstore add alpic-ai/chatgpt-app-builder
```

## Metadata

- Status: approved
- Slug: alpic-ai-chatgpt-app-builder
- Skillstore revision: r1
- Version status: missing
- Tree hash: 3d7bd48d657d54166f89f20755a1b52ed63a42a2a40eb534257f663ece30e14b
- Author: alpic-ai
- GitHub username: alpic-ai
- License: MIT
- Repository: https://github.com/alpic-ai/skybridge/tree/8fd1fe87aa28c89375afd21cf42b05e6bddd0f52/skills/chatgpt-app-builder
- Ref: 06161a591a23cfa999283946c003cdd91f2317df
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: allowed
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: filesystem, external\_commands, network, env\_access
- Quality score: 75
- Public page: https://skillstore.pages.dev/skills/alpic-ai-chatgpt-app-builder
- Manifest: https://skillstore.pages.dev/api/skills/alpic-ai-chatgpt-app-builder/manifest

## Capabilities

- Guides product discovery and records requirements in SPEC.md.
- Designs MCP tools, custom views, and conversational user flows.
- Scaffolds TypeScript Skybridge projects with supported package managers.
- Implements React views, shared state, model context, and responsive display modes.
- Configures OAuth providers, CSP allowlists, external links, and file downloads.
- Supports local testing, model evaluations, Alpic deployment, and directory submission.

## Use Cases

- Prototype a ChatGPT app: Turn a focused product idea into a specification, MCP tool design, and interactive React view.
- Add secure user data access: Configure OAuth, tool permissions, scopes, and authenticated handlers for user-specific workflows.
- Prepare an app for release: Run local checks, model evaluations, deployment steps, CSP audits, and directory submission tasks.

## Prompt Templates

### Explore an app idea

```
Help me define a ChatGPT app for [audience]. The main problem is [problem]. Ask one discovery question at a time.
```

### Design tools and views

```
Review my SPEC.md. Design focused MCP tools and React views for [workflow]. Explain which steps need custom UI.
```

### Implement authenticated data access

```
Add [OAuth provider] authentication to this Skybridge app. Protect [tools] with [scopes] and keep [public tool] anonymous.
```

### Validate and release the app

```
Audit this Skybridge app for tool annotations, CSP, responsive views, authentication, evaluations, deployment, and directory submission. Fix verified issues.
```

## Limitations

- Requires an existing development environment and access to the selected package manager.
- Uses Skybridge-specific APIs and does not provide framework-neutral MCP guidance.
- External services, OAuth providers, and deployment platforms require separate accounts and credentials.
- Live model evaluations can incur provider costs and require API keys.

## Best Practices

- Keep SPEC.md current before changing architecture or implementation.
- Expose concise model data while keeping large display-only payloads in view metadata.
- Verify authentication, tool annotations, CSP domains, and responsive layouts before deployment.

## Anti Patterns

- Do not port an entire application when a few focused conversational actions are sufficient.
- Do not place secrets in model-visible content, view metadata, logs, or committed files.
- Do not duplicate the same payload across content, structured data, view state, and model annotations.

## Security Audit

- Audited at: 2026-09-14T14:39:24.134\+00:00
- Summary: All 89 static findings are false positives caused by Markdown syntax, TypeScript template literals, relative imports, placeholder URLs, local development endpoints, or standard OAuth configuration. No prompt injection, credential exfiltration, unsafe path handling, command execution, or malicious intent was found.

## Stats

- Views: 0
- Downloads: 0
- Favorites: 0
- Popularity score: 0