pp-openrouter-image

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: All identified external resources, including the Go module path github.com/mvanhorn/printing-press-library/... and the NPM package @mvanhorn/printing-press-library, are associated with the recognized skill author mvanhorn. These are legitimate vendor-owned tools and libraries.
  • [COMMAND_EXECUTION]: The skill uses a custom binary openrouter-image-pp-cli. Analysis shows this binary is used for its intended purpose: managing OpenRouter image generation, cost tracking, and local usage logs.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the CLI tool using npx or go install. These downloads point to official package registries (NPM) and the vendor's own GitHub repository, which is a standard distribution method for this toolset.
  • [DATA_EXFİLTRATION]: The skill manages an OPENROUTER_API_KEY. The documentation correctly states that the key is read per command and not persisted to disk by the CLI itself, following security best practices for credential handling in CLI tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 11:31 AM
Security Audit — agent-trust-hub — pp-openrouter-image