The Agent Skills Directory

[SAFE]: The skill implements a standard OAuth PKCE (Proof Key for Code Exchange) flow, which is the industry-standard secure method for authentication in public clients like browser-based web apps.
[SAFE]: The implementation instructions correctly prioritize security by advising the use of sessionStorage for the temporary code verifier, ensuring it does not persist beyond the active session or leak to other tabs.
[SAFE]: All external references and network operations target official OpenRouter domains (openrouter.ai) and the vendor's GitHub infrastructure (openrouterteam.github.io).
[SAFE]: The provided code module is transparent and utilizes the native Web Crypto API for secure random generation and SHA-256 hashing, avoiding unnecessary third-party dependencies.

openrouter-oauth