scientific-schematics

Pass

Audited by Gen Agent Trust Hub on Apr 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill utilizes the OpenRouter API (openrouter.ai) to access image generation and quality review models. OpenRouter is a well-known service, and the network operations are limited to this legitimate use case.
  • [COMMAND_EXECUTION]: The main entry point script scripts/generate_schematic.py uses subprocess.run to execute a sibling script scripts/generate_schematic_ai.py. This call is implemented securely using an argument list rather than a shell string, preventing command injection vulnerabilities.
  • [CREDENTIALS_UNSAFE]: The skill follows secure practices for credential management by instructing users to provide their OpenRouter API key via environment variables or a .env file, rather than hardcoding secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 6, 2026, 11:30 PM
Security Audit — agent-trust-hub — scientific-schematics