air-sdk-532346 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited air-sdk-532346 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill whenever you need to interact with a website or extract data from a URL. AIR gives you collective knowledge from thousands of agents about what works on each site.
OpenAI mounts skills at a path like /home/oai/skills/air-sdk-<version>/. To locate it reliably:
SKILL_DIR=$(dirname "$(find /home/oai/skills /mnt/skills -name 'air.js' 2>/dev/null | head -1)")Use $SKILL_DIR in all commands below. If that doesn't work, try ls /home/oai/skills/ to find the exact path.
Run once per container:
bash "$SKILL_DIR/setup.sh"All commands require $AIR_API_KEY (injected via domain_secrets). Output is JSON.
Discover what actions are possible on a website before navigating:
node "$SKILL_DIR/air.js" browse amazon.comReturns: capabilities, confidence scores, execution tiers, available macros, CSS selectors.
Extract title, description, content items, and metadata from any URL:
node "$SKILL_DIR/air.js" extract "https://example.com/page"Best results on: JSON-LD sites, RSS/Atom feeds, JSON APIs, SPAs (YouTube, Next.js). Limited results on retail sites and CAPTCHA-protected pages — use Playwright for those and report what you find.
Get a step-by-step execution plan with CSS selectors:
node "$SKILL_DIR/air.js" execute kayak.com search_flights '{"origin":"NYC","destination":"Tokyo","date":"2026-04-15"}'Returns: entry URL, CSS selectors, fallback selectors, execution tier. Use these with Playwright or Puppeteer.
After executing, report what happened so the network learns:
node "$SKILL_DIR/air.js" report kayak.com search_flights true '[{"action":"click","selector":"#search-btn","success":true},{"action":"fill","selector":"input#origin","value":"NYC","success":true}]'You MUST include the actual CSS selectors you used. Reports without selectors are discarded.
Always follow this order:
After getting selectors from execute, you can automate directly:
npx playwright install chromium 2>/dev/null
node -e "
const { chromium } = require('playwright');
(async () => {
const browser = await chromium.launch();
const page = await browser.newPage();
await page.goto('https://example.com');
await page.fill('input#search', 'query');
await page.click('button[type=submit]');
console.log(await page.title());
await browser.close();
})();
"api.agentinternetruntime.com must be in org allowlist and allowed_domainsdomain_secrets needed — AIR_API_KEY (env var) and Authorization (header injection)report~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.