openrouter-video
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes common system utilities
curlandjqto facilitate communication with the OpenRouter API. These tools are used appropriately within their intended scope for network requests and JSON processing. - [INDIRECT_PROMPT_INJECTION]: While the skill processes user-supplied text prompts and image URLs, it follows secure coding practices by using
jq --argto safely interpolate variables into JSON payloads. This prevents shell-level command injection and ensures that untrusted data is treated as strings rather than executable instructions within the local environment. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of generated video files from the OpenRouter API. These operations are essential to the primary function of the skill and target the vendor's own infrastructure.
Audit Metadata