chatkit-frontend
Enables developers to create customizable chat UIs using OpenAI ChatKit React components for enhanced user interaction.
Install this skill
Security score
The chatkit-frontend skill was audited on Feb 25, 2026 and we found 17 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 100 | url: `${process.env.NEXT_PUBLIC_API_URL}/chatkit`, |
Template literal with variable interpolation in command context
| 130 | url: `${process.env.NEXT_PUBLIC_API_URL}/chatkit`, |
Template literal with variable interpolation in command context
| 146 | greeting: `Hello${user?.name ? `, ${user.name}` : ''}! How can I help you today?`, |
Template literal with variable interpolation in command context
| 324 | router.push(`/chat?thread=${conversationId}`); |
Access to .env file
| 100 | url: `${process.env.NEXT_PUBLIC_API_URL}/chatkit`, |
Access to .env file
| 101 | domainKey: process.env.NEXT_PUBLIC_OPENAI_DOMAIN_KEY || 'local-dev', |
Access to .env file
| 130 | url: `${process.env.NEXT_PUBLIC_API_URL}/chatkit`, |
Access to .env file
| 131 | domainKey: process.env.NEXT_PUBLIC_OPENAI_DOMAIN_KEY || 'local-dev', |
Access to .env file
| 335 | # Frontend (.env.local) |
External URL reference
| 12 | - [OpenAI ChatKit Docs](https://platform.openai.com/docs/guides/chatkit) |
External URL reference
| 13 | - [ChatKit.js Docs](https://openai.github.io/chatkit-js/) |
External URL reference
| 16 | - [Domain Allowlist](https://platform.openai.com/settings/organization/security/domain-allowlist) - Required for production |
External URL reference
| 336 | NEXT_PUBLIC_API_URL=http://localhost:8000 |
External URL reference
| 339 | # Get from: https://platform.openai.com/settings/organization/security/domain-allowlist |
External URL reference
| 345 | 1. Deploy frontend to get production URL (e.g., `https://your-app.vercel.app`) |
External URL reference
| 346 | 2. Go to: https://platform.openai.com/settings/organization/security/domain-allowlist |
External URL reference
| 439 | allow_origins=["http://localhost:3000", "https://your-app.vercel.app"], |
Install this skill with one command
/learn @maneeshanif/chatkit-frontend