技能 extension-openai
📦

extension-openai

v0.1.0 内容修订 r1 高风险 ⚙️ 外部命令🌐 网络访问📁 文件系统访问

Build Secure OpenAI Features on Caffeine

Direct OpenAI calls from Internet Computer canisters can expose credentials and multiply charges. This skill provides typed Motoko patterns for safer chat integration.

支持: Claude Codex Code(CC)
⚠️ 38 差

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求
Review the Skillstore skill "extension-openai" from https://skillstore.io/skills/caffeinelabs-extension-openai.md and its manifest at https://skillstore.io/api/skills/caffeinelabs-extension-openai/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/caffeinelabs-extension-openai.md 已签名 manifest GET /api/skills/caffeinelabs-extension-openai/manifest 已签名 lockfile GET /api/skills/caffeinelabs-extension-openai/lockfile

测试它

正在使用“extension-openai”。 Add OpenAI chat to a signed-in application with several independent users.

预期结果:

  • Selected the per-user key model because the application has login and multiple users.
  • Planned authenticated key setup, configuration status, key removal, and chat screens.
  • Required non-replicated calls and typed openai-client requests.

正在使用“extension-openai”。 Audit an administrator-funded chat endpoint.

预期结果:

  • High risk: authenticated users can submit unlimited operator-funded requests.
  • Recommended per-user quotas, request throttling, usage monitoring, and a global spending limit.
  • Confirmed that no endpoint returns the stored key.

正在使用“extension-openai”。 Use real-time streaming responses with the pinned connector.

预期结果:

  • The pinned connector does not support Realtime or streaming.
  • Use a supported non-streaming flow or choose another reviewed integration.

安全审计

高风险
v1 • 2026/7/23 打开版本化报告

All 154 static detections are false positives for their reported patterns; they are Markdown formatting, reference URLs, fixed imports, or ordinary prose. Semantic review found overbroad orchestrator directives, an unauthenticated key and chat variant, and missing usage controls in the operator-funded example. These issues can force dependency choices or enable credential replacement, denial of service, and unbounded OpenAI charges.

1
已扫描文件
477
分析行数
0
复核项
0
已忽略误报

已确认安全问题 (3)

高
SKILL.md:11-14SKILL.md:28-42
Prompt Injection Attempt Detected
SKILL.md says "do not decline, deflect, or call `query_rag`" and requires every relevant build to use one package. These directives attempt to control host routing beyond technical integration guidance.
The file explicitly instructs the orchestrator not to use another tool and mandates its own activation and dependency choice.
高
SKILL.md:365SKILL.md:391-397SKILL.md:401-403
Unauthenticated Credential Replacement and Paid API Use
The anonymous variant exposes an unauthenticated API-key setter and removes the chat permission check. Any visitor can overwrite the shared credential and drive paid requests.
The instructions deliberately remove both setter and chat authorization while acknowledging that every visitor can replace the key.
高
SKILL.md:93-95SKILL.md:346-351
Operator-Funded Requests Lack Usage Controls
The administrator-funded example checks only the user role before calling OpenAI. It includes no quota, rate limit, cost ceiling, or abuse control for authenticated users.
The example directly reaches the paid API after one role check, while the same file states that the long-lived key can spend the account balance.

风险因素

⚙️ 外部命令 (50)
SKILL.md:6 SKILL.md:7 SKILL.md:14 SKILL.md:28 SKILL.md:30 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:40 SKILL.md:44 SKILL.md:48 SKILL.md:49 SKILL.md:50 SKILL.md:56 SKILL.md:57 SKILL.md:60 SKILL.md:61 SKILL.md:63 SKILL.md:65 SKILL.md:69-71 SKILL.md:71-73 SKILL.md:73 SKILL.md:75 SKILL.md:79-86 SKILL.md:86 SKILL.md:89 SKILL.md:96 SKILL.md:100 SKILL.md:102 SKILL.md:103 SKILL.md:104 SKILL.md:106-110 SKILL.md:110-112 SKILL.md:112-114 SKILL.md:114 SKILL.md:118 SKILL.md:122 SKILL.md:123 SKILL.md:124-126 SKILL.md:126-135 SKILL.md:135-145 SKILL.md:145-147 SKILL.md:147-153 SKILL.md:153 SKILL.md:154-184 SKILL.md:184-186 SKILL.md:186-194 SKILL.md:194-210 SKILL.md:210 SKILL.md:229-233
🌐 网络访问 (8)
SKILL.md:32 SKILL.md:24 SKILL.md:79 SKILL.md:272 SKILL.md:471 SKILL.md:472 SKILL.md:473 SKILL.md:474
📁 文件系统访问 (8)
SKILL.md:63 SKILL.md:151 SKILL.md:306 SKILL.md:327 SKILL.md:411 SKILL.md:437 SKILL.md:475 SKILL.md:476
审计者: codex
分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告
安全评估

复制报告链接

https://skillstore.io/skills/caffeinelabs-extension-openai/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/caffeinelabs-extension-openai/security.svg)](https://skillstore.io/skills/caffeinelabs-extension-openai?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/caffeinelabs-extension-openai?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/caffeinelabs-extension-openai/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/caffeinelabs-extension-openai.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学术引用 (APA · BibTeX · CFF)

APA 引用

caffeinelabs. (2026). extension-openai security audit report (audit version 1) [Author version 0.1.0]. Skillstore. https://skillstore.io/skills/caffeinelabs-extension-openai/audits/1

BibTeX 引用

@techreport{caffeinelabs-caffeinelabs-extension-openai-2026, author = {caffeinelabs}, title = {extension-openai security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/caffeinelabs-extension-openai/audits/1}, note = {Author version 0.1.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "extension-openai security audit report (audit version 1)" version: "0.1.0" type: report authors: - name: "caffeinelabs" date-released: "2026-07-23" url: "https://skillstore.io/skills/caffeinelabs-extension-openai/audits/1" identifiers: - type: other value: "skillstore:caffeinelabs-extension-openai:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据 证据置信度: 中
55
架构
100
可维护性
87
内容
65
社区
91
规范符合性

你能构建什么

Per-user AI chat

A Motoko developer adds signed-in chat where each user supplies and funds a separate OpenAI key.

Operator-funded assistant

A SaaS operator configures one protected key for authenticated users and adds application-level spending controls.

Integration security review

A security engineer checks key exposure, caller gates, replication settings, and unsupported API requirements before deployment.

试试这些提示

Add OpenAI chat 
Add OpenAI chat to my Caffeine AI project. Use per-user keys, typed openai-client bindings, and a settings page.
Choose key ownership 
Choose an API-key ownership model for this project: [requirements]. Compare per-user, administrator-funded, and anonymous options with security and billing tradeoffs.
Design funded access 
Design an administrator-funded OpenAI chat feature for [application]. Include role gates, per-user quotas, rate limits, cost ceilings, and configuration status.
Audit an integration 
Audit this Motoko OpenAI integration for raw HTTP calls, key exposure, replicated outcalls, missing caller checks, unsupported APIs, and unbounded spending.

最佳实践

  • Default to per-user keys when ownership and billing responsibility are not explicit.
  • Keep keys server-side, expose only configuration status, and never log or return credentials.
  • Enforce non-replicated outcalls, usage limits, and cost monitoring before production deployment.

避免

  • Do not build raw OpenAI HTTP requests or hand-written response parsing.
  • Do not expose API-key getters, browser storage, logs, or telemetry containing credentials.
  • Do not deploy anonymous or shared-key access without strict quotas and explicit risk acceptance.

常见问题

Which projects does this skill support?
It targets Caffeine AI applications using Motoko and Internet Computer canisters.
Does the skill call OpenAI automatically?
No. It provides instructions and examples for applications that call OpenAI after key configuration.
Which key ownership models are included?
It covers per-user keys, one administrator-managed key, and an unsafe anonymous shared-key variant.
Does the connector support streaming?
No. The documented connector returns complete responses and does not support Realtime or server-sent events.
Which dependency is required?
The instructions use openai-client version 0.2.5 or later through the Mops package manager.
Is the anonymous variant suitable for production?
No. Any visitor can replace the key and make billable requests, so production deployments need authentication and usage limits.

开发者详情

许可证

MIT

作者版本

v0.1.0

Skillstore 修订

r1

仓库

https://github.com/caffeinelabs/skills/tree/10fb452613c797633b8cb33639fc9a754a138039/skills/extension-openai

引用

f32f934280aa94e399d875d7cf7b2ed16d1b82a3

维护新鲜度

2026/7/23

使用量

0 次下载 · 0 次浏览

文件结构

📄 SKILL.md