Skip to main content

ChatKit Skill

Enables the creation of AI-driven chat experiences using OpenAI's ChatKit framework with customizable UI components and backend integration.

Install this skill

or
85/100

Security score

The ChatKit Skill skill was audited on May 12, 2026 and we found 11 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 328

Template literal with variable interpolation in command context

SourceSKILL.md
328{ type: "Text", value: `Profile: ${entity.title}` },
low line 60

Fetch to external URL

SourceSKILL.md
60const res = await fetch('/api/chatkit/session', { method: 'POST' });
low line 88

Fetch to external URL

SourceSKILL.md
88const res = await fetch('/api/chatkit/session', { method: 'POST' });
low line 93

Fetch to external URL

SourceSKILL.md
93const res = await fetch('/api/chatkit/refresh', {
low line 36

External URL reference

SourceSKILL.md
36- Widget Builder: https://widgets.chatkit.studio
low line 37

External URL reference

SourceSKILL.md
37- Playground: https://chatkit.studio/playground
low line 38

External URL reference

SourceSKILL.md
38- Demo: https://chatkit.world
low line 77

External URL reference

SourceSKILL.md
77<script src="https://cdn.platform.openai.com/deployments/chatkit/chatkit.js" async></script>
low line 152

External URL reference

SourceSKILL.md
1521. Create a workflow in Agent Builder at https://platform.openai.com/agent-builder
low line 368

External URL reference

SourceSKILL.md
368Widgets are rich UI components rendered in the chat. Use the Widget Builder at https://widgets.chatkit.studio to design visually.
low line 616

External URL reference

SourceSKILL.md
616src="https://example.com/image.jpg",
Scanned on May 12, 2026
View Security Dashboard
Installation guide →