openrouter-tts

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides a bash workflow that uses standard system utilities such as curl, jq, and mktemp. These operations are used to securely transmit audio synthesis requests to the vendor's endpoint at openrouter.ai and handle the resulting binary audio data.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted text input for conversion to speech. It follows security best practices by using jq to properly escape the input text when building the JSON payload in shell scripts, preventing malformed API requests or command injection during the payload construction phase.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 06:55 PM