@openai/agents-core

The OpenAI Agents SDK is a lightweight yet powerful framework for building multi-agent workflows.

Latest 0.20.0

NPM

86%

Total Score

healthy

Active maintenance and strong release hygiene outweigh a repository naming mismatch and workflow audit cautions.

Are you affected? Scan for Free

Health Score Breakdown

Repo package mention

The repository name does not match @openai/agents-core and its README does not mention that package, creating uncertainty about whether the linked source is the correct package repository; this may be ordinary monorepo structure but is not confirmed by the signal.

Version stability

Version 0.20.0 is not a stable major release, but it is not prerelease and recent releases contain no prerelease versions, so the maturity concern is limited.

Workflow audit

All eight workflows were analyzed with no untrusted checkouts, script injections, or unpinned actions. The high-confidence template-injection finding is a hygiene caution, and trusted publishing was flagged despite its informational severity.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-571058 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @openai/agents-core is vulnerable to Improper Authorization in versions 0.0.7 - 0.10.0.	0.0.7 - 0.10.0	Medium
AIKIDO-2026-956109 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @openai/agents-core is vulnerable to Path Traversal in versions 0.9.0 - 0.10.1.	0.9.0 - 0.10.1	Medium
AIKIDO-2026-152028 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @openai/agents-core is vulnerable to Improper Authorization in versions 0.0.1 - 0.11.8.	0.0.1 - 0.11.8	Medium