openrouter-compliance-review
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs automated compliance reviews by scanning local source code for hardcoded OpenRouter API keys using standard command-line tools.
- [SAFE]: Network communication is restricted to the official OpenRouter API (openrouter.ai) to retrieve metadata for the user's API key, such as spending limits and tier status, which is necessary for the stated compliance purpose.
- [SAFE]: The provided Python scripts and templates follow security best practices, such as recommending the use of environment variables for secrets and implementing PII redaction patterns.
- [SAFE]: The skill uses scoped tools (Bash for python, curl, and jq) that are appropriate for its functional requirements.
Audit Metadata