Skip to main content

chatkit-backend

Builds a FastAPI backend for OpenAI ChatKit, enabling SSE streaming, conversation persistence, and AI agent integration.

Install this skill

or
30/100

Security score

The chatkit-backend skill was audited on Feb 25, 2026 and we found 10 security issues across 4 threat categories, including 4 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 251

Direct command execution function call

SourceSKILL.md
251conversation = session.exec(
high line 274

Direct command execution function call

SourceSKILL.md
274messages = session.exec(
high line 521

Direct command execution function call

SourceSKILL.md
521conversations = session.exec(
high line 536

Direct command execution function call

SourceSKILL.md
536conversation = session.exec(
medium line 587

Curl to non-GitHub URL

SourceSKILL.md
587# Test with curl
low line 573

Access to .env file

SourceSKILL.md
573# Backend (.env)
low line 300

External URL reference

SourceSKILL.md
300"http://localhost:3000",
low line 301

External URL reference

SourceSKILL.md
301"https://your-app.vercel.app",
low line 588

External URL reference

SourceSKILL.md
588curl -X POST http://localhost:8000/chatkit \
low line 604

External URL reference

SourceSKILL.md
604"http://localhost:8000/chatkit",
Scanned on Feb 25, 2026
View Security Dashboard