openrouter-api

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical reference for the OpenRouter API. It provides instructions for Chat Completions, Responses, and multimodal integrations.
  • [SAFE]: External URLs (openrouter.ai, github.com) are well-known official service domains and trusted repositories. The X-Generation-Id and Authorization headers are handled according to industry best practices for secret management (loading from environment variables, avoiding logs).
  • [SAFE]: The included scripts (discover_models.py, inspect_openapi.py) are utility tools for fetching public API metadata and OpenAPI schemas. They use standard Python libraries for network requests and do not perform any hidden or suspicious operations.
  • [SAFE]: The documentation explicitly warns against credential exposure, logging sensitive payloads, and SSRF when fetching user-controlled URLs, demonstrating a strong security posture.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 12:57 PM
Security Audit — agent-trust-hub — openrouter-api