Skill Trust Decision
gpt-chat
Multiple undocumented capabilities found: HTTP server with undeclared endpoints, undeclared filesystem writes for state persistence and file generation, and undeclared environment variable usage.
Most direct threat evidence
Why this conclusion was reached
1/4 dimensions flagged Block
Declared vs actual capability
1 undeclared or violating capabilities were inferred.
Review
Hidden execution and egress
3 lower-risk artifacts were extracted and still need context.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Pass
Dependencies and supply chain hygiene
Dependencies are present but no obvious high-risk issue stands out.
What drove the risk score up
Undeclared HTTP server +15
server.js creates HTTP listener on port 3456 with /chat, /set-model endpoints - not mentioned in SKILL.md
Undeclared filesystem writes +10
state.json persistence and article file generation not declared
Undeclared environment variable +5
OPENAI_API_BASE used but not documented in requires section
Test scripts included +5
test.js, test-key.js, test-chat.js present but not referenced in documentation
External proxy usage +5
api.openai-proxy.org used as default instead of official OpenAI API
No malicious behavior confirmed +0
All code appears to be legitimate GPT API wrapper functionality
Most important evidence
Medium Doc Mismatch
Undeclared HTTP server with API endpoints
server.js creates an HTTP server on port 3456 that exposes /health, /set-model, /chat, and /models endpoints. This network listener functionality is completely absent from SKILL.md.
scripts/server.js:55 Document the HTTP server capability if intentional, or remove server.js from the skill package.
Medium Doc Mismatch
Undeclared filesystem write operations
gpt.js reads and writes state.json for model persistence, and generate-article.js writes output files. Neither is declared in SKILL.md.
scripts/gpt.js:32 Add filesystem:WRITE to declared capabilities if state persistence is intentional.
Low Doc Mismatch
Undeclared environment variable usage
OPENAI_API_BASE environment variable is used as the API endpoint but is not listed in the requires.env section of SKILL.md.
scripts/gpt.js:10 Document all required and optional environment variables in SKILL.md.
Low Doc Mismatch
Undocumented test scripts
test.js, test-key.js, and test-chat.js exist but are not referenced anywhere in SKILL.md documentation.
scripts/test.js:1 Either document these helper scripts or remove them from the skill package.
Low Supply Chain
External proxy dependency
Skill defaults to api.openai-proxy.org instead of official OpenAI API endpoints, introducing an untrusted intermediary.
scripts/gpt.js:11 Consider documenting the proxy requirement or providing official OpenAI endpoints as default.
Declared capability vs actual capability
Network Pass
Declared READ
→ Inferred READ+WRITE
server.js:55 creates HTTP server that accepts POST requests Filesystem Block
Declared NONE
→ Inferred WRITE
gpt.js:32 writes state.json; generate-article.js:68 writes ai-future-article.md Environment Pass
Declared READ
→ Inferred READ
OPENAI_API_KEY read in all scripts Shell Pass
Declared NONE
→ Inferred NONE
No subprocess or shell execution found Suspicious artifacts and egress
Medium External URL
https://api.openai-proxy.org scripts/gpt.js:11
Medium External URL
https://clawhub.ai/user/lilisidu1210-ui skill-card.md:7
Medium External URL
https://clawhub.ai/lilisidu1210-ui/gpt-chat skill-card.md:28
Dependencies and supply chain
| Package | Version | Source | Known vuln | Notes |
|---|---|---|---|---|
| node | system | system | No | No npm dependencies - uses only built-in Node.js modules (fs, https, http, url) |
| api.openai-proxy.org | N/A | external | No | External proxy service used as default API endpoint |
File composition
11 files · 576 lines
JavaScript 6 files · 455 linesMarkdown 2 files · 101 linesJSON 3 files · 20 lines
Files of concern · 4
scripts/gpt.js Undeclared filesystem write operations · Undeclared environment variable usage · External proxy dependency · https://api.openai-proxy.org
scripts/server.js Undeclared HTTP server with API endpoints
skill-card.md https://clawhub.ai/user/lilisidu1210-ui · https://clawhub.ai/lilisidu1210-ui/gpt-chat
scripts/test.js Undocumented test scripts
Other files · generate-article.js · SKILL.md · test-chat.js · test-key.js · package.json · _meta.json +1
Security positives
No credential harvesting or exfiltration detected
No reverse shell or remote code execution patterns found
No base64 encoding or obfuscation detected
No access to sensitive paths like ~/.ssh or .env files
API key is only used for legitimate OpenAI API calls
No cron jobs, backdoors, or persistence mechanisms found
No suspicious network connections to unknown IPs