openrouter-video

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes common system utilities curl and jq to facilitate communication with the OpenRouter API. These tools are used appropriately within their intended scope for network requests and JSON processing.
  • [INDIRECT_PROMPT_INJECTION]: While the skill processes user-supplied text prompts and image URLs, it follows secure coding practices by using jq --arg to safely interpolate variables into JSON payloads. This prevents shell-level command injection and ensures that untrusted data is treated as strings rather than executable instructions within the local environment.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of generated video files from the OpenRouter API. These operations are essential to the primary function of the skill and target the vendor's own infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 04:06 AM