openrouter-tts
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a bash workflow that uses standard system utilities such as
curl,jq, andmktemp. These operations are used to securely transmit audio synthesis requests to the vendor's endpoint atopenrouter.aiand handle the resulting binary audio data. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted text input for conversion to speech. It follows security best practices by using
jqto properly escape the input text when building the JSON payload in shell scripts, preventing malformed API requests or command injection during the payload construction phase.
Audit Metadata